Sr. Security Engineer

📋 Description

• Build security program end-to-end: cloud infra, apps, data, endpoint, IAM.
• Own compliance roadmap: SOC 2 II, ISO 27001, GDPR; partner with legal.
• Embed security into SDLC with secure coding standards and SAST/DAST tooling.
• Design and run incident response: monitoring, playbooks, lead responses.
• Own IAM strategy across internal systems, cloud infra, and customer platforms.
• Lead threat modeling and vulnerability management across a global system.

🎯 Requirements

• 8+ years in security engineering with leadership shaping a function.
• Deep cloud security experience (GCP preferred): network, IAM, secrets, containers.
• Strong app security: OWASP Top 10, secure SDLC, API security; SAST/DAST in CI/CD.
• Proven experience delivering compliance programs (SOC 2 II, ISO 27001).
• Data privacy knowledge (GDPR; CCPA); cross-functional with legal and GTM.
• Experience with modern security tooling: SIEM, EDR, CSPM, vulnerability scanners (Wiz, CrowdStrike, Datadog Security).
• Startup experience with high ownership and velocity; strong executive communication.

🎁 Benefits

• Hybrid work model in New York City area.
• Opportunities to build security function from the ground up, reporting to the CTO.
• Competitive compensation and benefits.