Lead Security Engineer
Core
Define and drive security strategy for a globally distributed SaaS platform, focusing on application security, infrastructure protection, compliance, and incident management while embedding security into the development lifecycle and securing AI-powered systems.
Role type
Senior IC Lead Security Engineer
Builds
Security automation, tools, and processes for a SaaS platform
Domain
SaaS, Cloud Security, AI Security
Required skills
Application and API security, Threat modeling, OAuth/OIDC/Session management, TypeScript, AWS, Kubernetes, Cloudflare, SOC 2 compliance, Vulnerability management, Incident response, AI system security
Preferred skills
PHP, Python, MCP servers, Social media management platforms
Technologies
Node.js, TypeScript, MongoDB, REST APIs, GraphQL, AWS (EKS, IAM, SQS, S3, CloudFront), Terraform, ArgoCD, GitHub Actions, Cloudflare, Vanta, Dependabot, gitleaks, AWS GuardDuty, Datadog, Sentry, incident.io, PagerDuty, Claude Team
Responsibilities
Define and lead overall security strategy and roadmap; Integrate security into SDLC via PR reviews, threat modeling, and supply chain security; Lead security incidents from detection to resolution; Manage vulnerability disclosure and bug bounty programs; Oversee SOC 2 and platform compliance initiatives; Assess and secure AI-powered systems and agents; Partner with engineering teams on security reviews and specifications.
Seniority
Senior, hands-on IC
