Senior Software Engineer, Security

About the role

We are looking for a Senior Software Security Engineer to own security across our enterprise SaaS platform. You will protect sensitive social and customer data, lead compliance initiatives, and build the security foundations that enable our fast‑growing engineering team.

Key responsibilities

• Own the security of deployed applications, including threat modeling, secure design reviews, and vulnerability remediation for services and AI infrastructure.
• Lead compliance programs such as SOC 2, ISO 27001, GDPR, and CCPA, establishing controls, policies, and evidence.
• Support the sales cycle by completing security questionnaires, participating in enterprise security reviews, and handling vendor assessments.
• Build and operate vulnerability management, secrets management, identity and access management, and security monitoring practices.
• Manage third‑party risk and oversee penetration‑testing programs.

Required profile

• 5+ years of experience in security engineering, application or product security, or a related role at a software company.
• Strong fundamentals in application and cloud security, with the ability to assess real production systems and AI workloads.
• Hands‑on experience leading or operating a compliance program (SOC 2, ISO 27001, or similar) end‑to‑end.
• Solid programming skills for building security tooling and automation.
• Comfortable working in a fast‑moving startup environment with high ownership.

Required skills

• SOC 2 compliance
• ISO 27001 compliance
• GDPR and CCPA knowledge
• Application security
• Cloud security
• AI infrastructure security
• Vulnerability management
• Secrets management
• Identity and access management
• Security monitoring