Lead Application Security Engineer

Job Title: Lead Application Security Engineer Job Location: Remote in USA & Canada (offices in SF, NY, and Austin) Job Duration: Full-Time Permanent Salary: $220K - $320K Visa Sponsorship: Open to visa transfers (e.g. OPT, H1B transfers) Equity: Competitive Equity Tech Stack: TypeScript, Go, Cloud: Multi-cloud across AWS, Azure, and GCP

Job description

Why candidates should join They'll work closely with our VP of Engineering and own application security end-to-end. Some problems they'll be working on include: multi-tenant isolation, sub-tenant access control, cloud security across multi-region/multi-cloud infrastructure, and internet-facing APIs processing 100K+ events/sec.

Company Overview Recently raised Series D, indicating growth and stability. Company valuation doubled since Series C, aiming for public offering in 3-5 years.

Role Requirements Seeking a security engineer with a computer science background. Candidate should ideally be an early hire or have experience building security practices from the ground up.

Candidate Requirements Must pass technical interviews and have experience with application security. Experience with data infrastructure or security-centric companies like Okta is beneficial.

Ideal Candidate Profile Looking for candidates with fast growth, impact, and a lead role experience. Education from reputable schools like Stanford is a plus.

Seniority 6+ years of experience as a security engineer with deep knowledge of distributed systems

Work experience Been an early security hire (first 3) at a SaaS product or data infrastructure company Must have gone from Backend software engineer -> Security engineer

Education CS, Math, or Physics degree Hard skills Experience securing systems across multi-cloud and/or multi-region infrastructure Securing multi-tenant platforms: tenant isolation, authorization models, etc Privacy-adjacent security (PII handling, data residency, GDPR/CCPA technical controls)

Miscellaneous Average tenure longer than 2 years Open to managers who want to move back in fully IC positions

Traits to avoid Not looking for purely offensive security focused engineers (pen testing, red team, gov-adjacent)