Senior Software Engineer, Security
True Talent Solutions Partners
About the role
About the Role
Join an early-stage enterprise identity and cybersecurity team as its first dedicated security engineer. You will build and own security systems across the product and company, partnering closely with engineering to make security part of product development from the start.
What You'll Do
Shape security across the product and engineering lifecycle, including secure design, code reviews, threat modeling, and vulnerability remediation.
Build security systems such as secrets management, certificate infrastructure, audit logging, and vulnerability management.
Lead security reviews and advise engineers on practical ways to address product risks.
Drive compliance programs, including SOC 2, ISO 27001, GDPR, and CCPA, from an engineering perspective.
Develop detection capabilities and incident response processes, including detection, triage, and response automation.
Contribute across product security, corporate security, and compliance, with an opportunity to help grow the security function.
What We're Looking For
At least 5 years of security engineering experience, including hands-on application or product security work at a B2B SaaS or fintech company.
Production software engineering experience in Go, building services or security systems.
Experience owning security across teams and building security capabilities in an early-stage or 0-to-1 environment.
Background in detection and incident response, including SIEM or detection-as-code workflows and Python automation.
Familiarity with cloud and Kubernetes security, including GCP, and identity protocols such as OAuth, SAML, OIDC, and WebAuthn.
Experience with SOC 2, ISO 27001, and GDPR, and familiarity with identity and access management is a plus.
Compensation & Benefits
Salary range: $180,000 to $230,000 USD annually. Visa sponsorship is not available.
Location
Remote, with Los Angeles, California as the primary location.
Responsibilities
- Shape security across the product and engineering lifecycle through secure design, code reviews, threat modeling, and vulnerability remediation.
- Build security systems for secrets management, certificate infrastructure, audit logging, and vulnerability management.
- Lead security reviews and advise engineers on product risks.
- Drive engineering-focused SOC 2, ISO 27001, GDPR, and CCPA compliance programs.
- Develop detection capabilities and incident response processes, including automation.
- Contribute to product security, corporate security, and compliance.
Qualifications
- At least 5 years of security engineering experience, including hands-on application or product security at a B2B SaaS or fintech company.
- Production software engineering experience with Go, building services or security systems.
- Experience owning security across teams in an early-stage or 0-to-1 environment.
- Experience with detection and incident response, including SIEM or detection-as-code workflows and Python automation.
- Familiarity with cloud and Kubernetes security, including GCP, and identity protocols such as OAuth, SAML, OIDC, and WebAuthn.
- Experience with SOC 2, ISO 27001, and GDPR; familiarity with identity and access management is a plus.