Security Engineer

About the role

We are hiring a Security Engineer to own product and application security for a single-tenant AI platform handling sensitive insurance data. Every customer runs in a fully isolated environment, with its own database on separate cloud infrastructure. You will build security into how we ship, across secure SDLC, AppSec, cloud posture, and supply-chain, and lead our response when issues arise.

What you'll do

• Drive secure SDLC and security-focused code review across the engineering org
• Own application security: authz, SSRF and injection prevention, and secrets management across many isolated customer environments
• Strengthen cloud security posture (GCP IAM, egress controls) and keep per-customer environments consistent, hardened, and free of drift, plus supply-chain controls
• Coordinate penetration testing, threat modeling, and vulnerability management
• Lead incident response and advance compliance readiness (e.g., SOC 2)

What you need

• IAM
• OWASP
• Vulnerability assessment
• Incident response
• Compliance
• LLMs

Good to have

• Cloud security
• Penetration testing
• GCP