Sr. Security Engineer
C1 · San Francisco Office
About this role
## Sr. Security Engineer ### About the role Join a small, early-stage security team in a broad, hands-on generalist role spanning security engineering, application & cloud security, and compliance. You’ll build purpose-built agents and automation to continuously orchestrate security across the development lifecycle using a risk-based approach—so security is baked into design specs up front, not caught after deployment. **Tech focus:** Go and AWS. The role is largely automation-driven (not manual ticket/spec/deploy review). ### What you’ll do - Define and drive security standards and secure-by-default solutions (application and/or cloud security SME). - Build agents/skills that automate repetitive security work (triage, enrichment, review) and support judgment calls. - Shift security left by embedding risk-based review into design specs and architecture decisions. - Build scalable security tooling and automation, including security observability and detection signals. - Lead threat modeling and risk assessment for high-risk features and platform changes. - Assess and help mitigate security risks from agentic development and AI-powered production features. - Partner with engineering to prioritize/remediate critical threats, define API security standards, and conduct security code reviews. - Explore and adopt open-source tools for security assessment and testing (avoid defaulting to manual review). - Identify systemic security risks and lead end-to-end remediation across teams. - Collaborate across security, compliance, and engineering; be a go-to point of contact for hard security questions. - Contribute to compliance/trust initiatives (e.g., SOC 2, ISO 27001/42001) as they intersect with your focus. - Help grow teammates and raise the security bar across the engineering org. ### What we’re looking for - Proven experience securing enterprise SaaS applications (authentication, authorization, and API boundary input validation). - Experience securing deployment and change-management mechanisms for software and infrastructure. - Background in software/platform/systems/network engineering, cloud security, or application security. - Hands-on code review experience (ideally Go, Python, or Rust). - AWS experience (or another major cloud provider) and comfort working across cloud infrastructure. - Ability to work independently and collaboratively in a fast-paced, high-growth environment. - Strong curiosity about modern security practices, tooling, emerging threats, and how AI changes the threat landscape. - Willingness to participate quarterly in-person in **San Francisco** or **Portland, Oregon**. ### Show us your agent work This role expects real, hands-on experience building agents and automation. Be ready to share one or more of: - A project/demo/repo where you built an agent, skill, or automation that replaced manual security work (triage, review, detection, etc.). - Examples of how you use AI coding tools or agentic workflows day-to-day. - A short walkthrough (live or recorded) of a security automation you shipped, including the problem, approach, and impact. ### Nice to have - Kubernetes, service mesh, or PKI/network technologies (e.g., Consul, Envoy, Cilium, Vault, Istio). - Experience building/extending internal security tooling, automations, or agents. - Prior experience at a high-growth SaaS or identity/access management company. ### Why this role High-leverage impact on a small, early-stage team: broad scope, real ownership, and
Listing freshness
CronJobs last confirmed this listing 3h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.