InstaLILY
Director, Security Engineering
$225K–$275K
New York City · Full-time +1 · Director · Full-time · Posted Oct 5, 2026
- Location
- New York City · Full-time
New York, New York, United States - Experience
- 8+ years in security engineering; hands-on security or compliance program ownership at a SaaS company. Series B–C stage is ideal.
About the job
Lead and build InstaLILY’s security program, securing its cloud platform and AI agents while owning compliance and enterprise customer security reviews.
What you'll do
- Own SOC 2 Type II, HIPAA, and GDPR programs; lead audits and customer security reviews.
- Harden cloud, identity, and agent security; write automation, tooling, and remediation code.
- Lead incident readiness, penetration testing, security roadmap, and growth of the security function.
What they ask for
- 8+ years in security engineering, including hands-on ownership of a security or compliance program at a SaaS company.
- Strong GCP and AWS IAM, Kubernetes, and Terraform/OpenTofu skills; able to threat-model multi-tenant, multi-cloud systems and review code.
- Write production-quality Python or TypeScript and deliver automation, tooling, and fixes.
- End-to-end SOC 2 Type II ownership, enterprise security review experience, real LLM experience, and availability to work in person 5 days/week in New York or San Francisco.
Nice to have
- HIPAA experience; formal people management.
- Experience securing LLM or agent products, building a security function from scratch, incident response, or relevant certifications.
Pay
USD $225,000 – $275,000 per year (base salary)
Tools
GCP, AWS, Kubernetes, Terraform/OpenTofu, Python, TypeScript, Okta, Drata
AI focus
Secure Lily’s AI agents through threat modeling, prompt-injection defenses, tenant isolation, agent authorization, and security checks in CI; the role also requires real LLM experience.
Model-written summary · the original posting is authoritative