Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.
About the role
You will own the security posture across the product lifecycle, including building security systems and driving compliance programs. You will also lead security reviews, threat modeling, and develop incident response processes.
What they look for
Requirements
The role requires at least 5 years of hands-on security engineering experience with production software development in Go. Candidates must have experience in B2B SaaS or fintech environments and knowledge of cloud security, compliance frameworks, and identity management.
Benefits
Full description
About the Role
Join an early-stage cybersecurity company building enterprise identity and access management software. As the first dedicated security hire, you will own security across the product and company, partnering closely with engineering and leadership while helping shape the security function.
What You'll Do
- Shape the security posture across the product lifecycle and work closely with engineering teams.
- Build security systems, including secrets management, certificate infrastructure, audit logging, and vulnerability management.
- Lead security reviews, threat modeling, and secure design consultations.
- Drive compliance programs from an engineering perspective, including SOC 2, ISO 27001, and GDPR.
- Develop incident response processes, detection capabilities, and vulnerability management practices.
- Contribute across product security, corporate security, and compliance, with the opportunity to grow the security function.
What We're Looking For
- At least 5 years of hands-on security engineering experience, including production software development in Go.
- Experience building security systems and contributing to a security program in an early-stage environment.
- Product or application security experience at a B2B SaaS or fintech company, including secure design, code review, and vulnerability remediation.
- Detection engineering and incident response experience, including SIEM or detection-as-code tools and Python automation.
- Knowledge of SOC 2, ISO 27001, GDPR, cloud security, Kubernetes, and GCP.
- Familiarity with OAuth, SAML, OIDC, WebAuthn, or identity and access management is a plus.
Compensation & Benefits
Base salary: $200,000 to $250,000 annually. Visa sponsorship is available.
Location
Fully remote within the United States.
