Founding Security Engineer

Key Information:
Work Model: On-site, 5 days per week
Employment Type: Full-time
Equity: Highly competitive
Visa: Open to H1B transfers andTN visa
Experience:7 to 15 years

Key Responsibilities:
-Define and build the company's security architecture across the product, infrastructure, and AI/LLM pipeline
-Take ownership of the security program as the first dedicated security engineering hire, reporting directly to the CTO
-Partner with engineering teams throughout the development lifecycle to identify security risks and establish secure design patterns
-Perform threat modeling, vulnerability assessments, penetration testing coordination, vulnerability scanning, and risk prioritization
-Review application and infrastructure code to identify security vulnerabilities and recommend practical remediation
-Design and strengthen cloud security architecture, with particular focus on multi-tenant isolation and protection of sensitive customer data
-Partner with infrastructure teams on multi-region architecture and data residency requirements
-Establish lightweight security policies and processes supporting both practical security and compliance requirements
-Own internal IT security, including devices, access management, identity, and employee security controls
-Serve as the technical security point of contact for audits, enterprise security questionnaires, customer reviews, and security assessments

Requirements:
-7 to 15 years of experience in security engineering or software engineering with a subsequent transition into security
-Hands-on experience across both application security and infrastructure security
-Experience building or establishing a security program from the ground up
-Strong understanding of threat modeling, vulnerability assessment, penetration testing, vulnerability scanning, and risk prioritization
-Ability to read and review code and identify security vulnerabilities
-Strong understanding of cloud security architecture
-Experience with multi-tenant environments and tenant isolation
-Ability to work closely with software and infrastructure engineers on secure system design
-Strong communication skills and the ability to explain technical security issues to engineering teams and business stakeholders