We are looking for a Senior Security Engineer with 3–10 years of experience to be the first dedicated security hire and build the security program from the ground up. You''ll own threat modeling, identify how the platform could be attacked, and drive resolution of critical vulnerabilities across the application, CI/CD, and infrastructure layers. This is a hands-on IC role – you''ll be writing code, auditing the Python codebase, and hardening the proxy and API authentication systems daily. The ideal candidate has previously built an AppSec program from scratch at an early-stage startup and genuinely lives and breathes security outside of work.
What you will be doing
- Conducting threat modeling to identify how client could be attacked and proactively preventing those attacks
- Performing deep security reviews and hardening of the Python proxy, APIs, and authentication systems
- Building the security program end-to-end – standing up processes, tooling, and secure development practices across application and CI/CD layers
- Driving resolution of critical vulnerabilities by partnering directly with engineers to fix issues, not just find them
- Owning security across IT, cloud infrastructure, and the software supply chain as the sole security engineer
- 3 - 10 years of experience: in security engineering, with focus on application security
- Visa Sponsorship Details: Open to visa transfers (e.g. OPT, H1B transfers)
- Remote work policy US-based working US hours
Tech stack
Python, FastAPI, Docker, GitHub Actions, AWS, Semgrep, Bandit, CodeQL, Burp Suite, Snyk, Trivy, Sigstore, OAuth2, JWT, mTLS
The base salary range for this full-time position, as provided by our client, is $220,000–$260,000 annually. Final compensation within this range will be determined by the client based on factors including the selected candidate''s relevant skills, experience, and qualifications. Please note that upon selection, all offer negotiations and compensation discussions will be conducted directly between the candidate and the client. Our firm serves as the facilitating partner in the introduction and selection process only.
Never miss an opportunity! Create an alert based on the job you applied for.
