Software Engineer, Security

Responsibilities

Build and maintain security systems for secrets management, certificate infrastructure, audit logging, and vulnerability management, while partnering with engineering on security reviews, threat modeling, secure design, code review, and remediation. Develop detection and incident response capabilities, lead engineering-focused compliance work, and contribute across product and corporate security as the security function grows.

Requirements

Requires at least five years of security engineering experience, including recent hands-on product or application security work at a B2B SaaS or fintech company. Candidates need production Go and Python experience, detection engineering and incident response expertise, familiarity with cloud and Kubernetes security and identity protocols, and experience with security programs and compliance frameworks.

Skills

• Security Engineering
• Product Security
• Application Security
• Go
• Python
• Detection Engineering
• Incident Response
• Threat Modeling
• Secure Design
• Cloud Security
• Kubernetes Security
• GCP
• OAuth
• SAML
• OIDC
• WebAuthn

About this role

About the Role
Join an early-stage cybersecurity company building enterprise identity software as its first dedicated security engineer. You will partner with engineering across the product lifecycle and take hands-on ownership of security systems, product security, detection, and compliance.
What You'll Do
Build and maintain security systems, including secrets management, certificate infrastructure, audit logging, and vulnerability management.
Partner with engineering on security reviews, threat modeling, secure design, code review, and vulnerability remediation.
Develop detection capabilities and improve triage and incident response processes.
Drive security compliance work from an engineering perspective, including SOC 2, ISO 27001, GDPR, and CCPA.
Contribute across product security, corporate security, and compliance, with the opportunity to help grow the security function.
What We're Looking For
At least 5 years of security engineering experience, with recent hands-on product or application security work at a B2B SaaS or fintech company.
Production Go development experience building services or security systems, plus Python experience for detection and triage automation.
Experience with detection engineering and incident response, including SIEM or detection-as-code tools such as Splunk, Panther, or Sigma.
Experience building or contributing to security programs in early-stage environments and collaborating across teams as a security generalist.
Knowledge of cloud and Kubernetes security, including GCP, and familiarity with OAuth, SAML, OIDC, or WebAuthn.
Experience with SOC 2, ISO 27001, and GDPR, as well as secure design and threat modeling.
Compensation & Benefits
Base salary: $200,000 to $250,000 USD annually. Visa sponsorship is available.
Location
Fully remote within the United States.