Lead Security Engineer

What you'll do

• Build and operate application security controls, CI/CD security gates, penetration testing, and cloud security safeguards.
• Own compliance, incident response, security architecture, and customer-facing security reviews.
• Automate security work with AI agents and DevOps tooling, while applying appropriate oversight and controls.

What they ask for

• 7 to 10 years of professional IT, DevOps, or application development experience, including at least 3 years with security as a primary responsibility.
• Has led security and compliance functions at a technology startup (Series A, B, or C stage).
• Hands-on experience building web applications, DevSecOps pipelines, and infrastructure-as-code; directly implemented and operated SOC 2 controls and controls for at least one regulated or government environment.
• Experience in a regulated industry and directing external auditors, assessors, managed service providers, penetration testers, or security and compliance vendors.

Nice to have

• First security hire at a Series A to Series C startup; personally led a startup through a SOC 2 Type II examination.
• Production AI-agent security or AI-assisted security workflows; relevant frameworks, certifications, compliance platforms, or offensive security evidence.

Pay

$180,000 - $350,000 USD annual base salary

Tools

Python, TypeScript, React, GitHub Actions, Docker, AWS CDK, Terraform, AWS

AI focus

Build and evaluate AI-agent automations for security tasks, and secure AI agents and applications through controls for tool permissions, prompt injection, sandboxing, and data boundaries.