Software Engineer, Security

Join an early-stage enterprise identity and access management company as its first dedicated security engineer. You will build and own security across the product and organization, partnering closely with engineering while helping establish the security function.

• Shape security practices across the product lifecycle and work with engineers on secure design.

• Build security systems for secrets management, certificate infrastructure, audit logging, and vulnerability management.

• Lead security reviews, threat modeling, code review, and vulnerability remediation.

• Develop detection and response capabilities, including detections, triage processes, and incident response.

• Drive engineering work for SOC 2, ISO 27001, GDPR, and CCPA compliance.

• Contribute across product security, corporate security, and compliance, with scope to grow the security team over time.

Fully remote within the United States.

• At least 5 years of hands-on security engineering experience, including production software development in Go.

• Experience building security systems in code and contributing to security programs in early-stage environments.

• Product or application security experience at a B2B SaaS or fintech company, including secure design and vulnerability remediation.

• Detection engineering experience with a SIEM or detection-as-code stack, plus Python automation for detection or triage.

• Experience with incident response, cloud and Kubernetes security, and GCP.

• Familiarity with OAuth, SAML, OIDC, WebAuthn, and compliance frameworks including SOC 2, ISO 27001, and GDPR.

• Ability to work across security disciplines with a hands-on, collaborative approach; identity or access management experience is a plus.

Base salary is $200,000 to $250,000 annually. Visa sponsorship is available.