Senior Security Engineer

*hiring on behalf of our client

Title: Senior Security Engineer

Time: Full-Time

Location: Remote (USA)

Compensation: $180,000 - $230,000 USD + Equity

The Company

Our client is a seed-stage, stealth-mode startup reimagining enterprise identity from the ground up. Founded by the team behind Fleetsmith (which was acquired by Apple in June 2020 after raising over $40M), they are building a secure-by-design identity platform that combines consumer-grade UX with best-in-class security practices. They are a fully remote team backed by a top-tier Bay Area VC with significant runway.

Role Overview

As the first dedicated security hire, you will shape and own the company's security posture across the full stack while reporting directly to the co-founder/CPO/CSO. This is a high-autonomy role for a hands-on security engineer who is excited to build security programs from scratch, write production Go code, and partner closely with engineering to build secure-by-design systems. Over time, there is a clear path to help build out the broader security function as the company scales.

Key Responsibilities

• Build security systems from scratch, including secrets management, certificate infrastructure, audit logging, and vulnerability management.

• Lead security reviews, threat modeling, and secure design consultations directly within engineering product development.

• Write, review, and ship production Go code to implement application and product security features.

• Drive and own compliance programs (SOC 2, ISO 27001, GDPR, CCPA) from an engineering perspective.

• Define and mature incident response processes, triage, and detection capabilities using a detection-as-code stack.

• Build automated detections and triage workflows using Python and SIEM/detection tooling.

• Manage corporate security, application security, and cloud infrastructure security across GCP and Kubernetes environments.

• Partner closely with leadership while maintaining strong individual ownership of the security function across multiple domains.

Qualifications

• 5+ years of hands-on security engineering experience, preferably in early-stage or high-growth environments.

• Strong hands-on production experience writing and shipping Go code (not just reviewing code).

• Proven track record of hands-on application/product security engineering on a live product, including secure design, code review, and vulnerability remediation.

• Direct experience building detections, managing triage, and leading incident response.

• Practical experience implementing and supporting compliance frameworks such as SOC 2, ISO 27001, and GDPR.

• Proficiency with detection engineering (e.g., Splunk, Panther, Sigma) and Python for security automation.

• Low-ego, highly collaborative mindset with a desire to play a hands-on security generalist role in a 0-to-1 environment.

Nice to Have

• Background in identity/access management (IAM) or enterprise IT/security software.

• Hands-on cloud security experience with GCP and Kubernetes.

• Familiarity with core identity protocols, including OAuth 2.0, SAML, OIDC, and WebAuthn.

• Relevant Bachelor's degree in Computer Science, Cybersecurity, or a related technical field.