Security Engineer

Responsibilities

Write production Go code and build reusable security tooling, libraries, middleware, guardrails, and detections. Review engineering design documents and architecture changes as the security reviewer. Own a security domain such as Kubernetes and cloud hardening, application security in CI, or detection engineering. Write and tune detections as code, add telemetry sources, and reduce alert noise. Expand Kubernetes, container, image-scanning, image-signing, admission-policy, pod-security, and runtime protections. Support incident response, security on-call, DLP rollout, bug bounty operations, resilience testing, and tabletop exercises. Deliver automated controls and evidence for SOC 1, SOC 2, OCC, and other regulatory workstreams. Influence cross-functional security planning and the security roadmap.

Requirements

Ability to write production code, particularly in Go. Hands-on experience with AWS, Kubernetes, SIEM and security services. Ability to become productive quickly in a fast-paced startup environment and contribute from the first week. Ability to own security initiatives independently and work across infrastructure, product, application security, detection and response, and technical GRC. Ability to participate in a security on-call rotation.

Benefits

Remote work within the United States; preference for candidates in New York City or willing to relocate. Opportunity to join a 40-person startup as its second security engineer and directly influence the security roadmap and platform. Participation in the security on-call rotation and ownership of meaningful, cross-functional security initiatives.