Sr. Security Engineer
Core
Build proactive in-house security review practices for an AI-powered construction tech platform, focusing on application security, AI/ML system security, and secure SDLC integration.
Role type
Senior Security Engineer (Application & Product Security)
Builds
Application and product security practice, internal security automation tooling, and AI security governance
Domain
Construction technology, AI/ML, Cloud Security
Deliverable
production ML models | product features
Required skills
proactive security review, threat modeling, secure SDLC integration, web application security, cloud security (AWS/GCP), modern auth patterns, code review (Python/Java/TypeScript), AI security risk assessment, incident response, security automation
Preferred skills
first/early security hire experience, SOC 2/ISO 27001 hands-on contribution, security automation tooling, open source security work, construction tech/geospatial background
Technologies
AWS, GCP, Python, Java/Kotlin, TypeScript, Claude Code
Responsibilities
Run proactive security reviews of new features and architectures, build application and product security practice, govern internal AI dev tool usage, partner with engineering to remediate vulnerabilities, support SOC 2 and ISO 27001 programs, mature incident response practice, build internal security automation tooling
Seniority
Senior, hands-on IC
