Founding Security Engineer

Founding Security Engineer

This company is a seed-stage, stealth startup building enterprise identity and access software, led by founders with a previous successful exit. The team is small, pre-launch, well funded and fully remote across the US and Canada, with regular in-person offsites.

This is the first dedicated security hire, reporting to a co-founder with deep security experience, with a path to building and leading the security team.

What you’ll do

•         Own security across the stack, working inside engineering from design to deployment.

•         Build core security systems from scratch: secrets management, PKI, audit logging and vulnerability management.

•         Lead security reviews and threat modeling.

•         Own SOC 2, ISO 27001, GDPR and CCPA from the engineering side.

•         Set up incident response and detection-as-code, including triage automation.

Must have

•         5+ years of dedicated security engineering.

•         Writes and ships production Go today.

•         Application/product security on a real product: secure design, code review and fixes.

•         Detection and response: built detections, triaged alerts, run incidents; SIEM or detection-as-code with Python automation.

•         Compliance experience (SOC 2, ISO 27001 or GDPR).

Nice to have

•         Has built a security program from scratch.

•         Identity/access management or enterprise security software background.

•         Kubernetes and GCP; OAuth, SAML, OIDC, WebAuthn.



Stack

•         Go, Python, GCP, Kubernetes, PKI, Vault, OAuth 2.0, SAML, OIDC, WebAuthn.

Base: $180,000 – $230,000 + early-stage equity

Location: Remote

Benefits: strong health coverage for employees and dependents, generous time off and paid parental leave

Visa: TN and H-1B transfers considered; O-1 possible; no new H-1B or F-1 OPT/CPT