Lead Security Engineer

Job Summary

As the first dedicated security hire, the full-time Lead Security Engineer will manage the security program, focusing on secure software development lifecycle practices, incident response, and compliance while working remotely in the US.

Key responsibilities

• Implement and oversee secure SDLC practices, including dependency scanning and security reviews
• Collaborate with DevOps on identity and access management, network architecture, and security policies
• Lead SOC 2 Type II compliance efforts, including control design and evidence collection

Required qualifications

• 5+ years of experience in security engineering, with expertise in application security, cloud security, and compliance
• Hands-on skills in reading code, writing scripts, and configuring cloud security controls
• Experience managing or contributing to a SOC 2 audit or equivalent compliance framework
• Proven ability to respond to enterprise security reviews, particularly in financial institutions
• Strong judgment regarding risk management and security controls relevant to company scale