Lead Security Engineer

Job Summary

Leading the security efforts for a profitable, AI-focused company, the full-time Lead Security Engineer will define security strategy, build solutions, and ensure compliance while working remotely within specific time zones (UTC-3 to UTC+3).

Key responsibilities

• Define the security strategy and roadmap, prioritizing and executing security initiatives
• Collaborate with product engineering teams to integrate security into the development process
• Lead security incidents and manage the security inbox, ensuring operational security and compliance

Required qualifications

• Experience as the senior security person in a multi-tenant SaaS environment without a CISO
• Hands-on knowledge of application and API security, including authorization models and threat modeling
• Proficiency in coding, particularly in TypeScript, with experience in legacy languages like PHP and Python
• Familiarity with AWS, Kubernetes, and infrastructure risk assessment
• Experience running or triaging a vulnerability disclosure or bug bounty program