Member of Technical Staff (Security)
Footprint · New York City
About this role
## Member of Technical Staff (Security) ### About Footprint Footprint is an agentic platform that learns your compliance program and runs it end to end—helping banks and fintechs reduce manual review workloads while improving auditability and decision consistency. Percy, our agentic system, makes compliance decisions on live PII, clears false positives, escalates real risk, writes case narratives, and documents every decision for audit. The platform includes an identity vault backed by AWS Nitro Enclaves and runs AI-powered agents in isolated sandboxes. --- ### The Role Footprint sells trust to banks and fintechs: verify identity, vault PII, and prove to auditors that every step was done correctly. We’re hiring the first person to fully own the product’s security boundary end to end. This is an engineering seat—most of your time is in the product, with security as your lens. You’ll report to the Head of Engineering (Elliott Forde). --- ### What You’ll Own - **Vault & enclave security**: Assess, harden, and stand behind the Nitro Enclave-backed vault (encryption, key management, hardware attestation, tamper-evident append-only audit ledger integrity, cross-tenant isolation). - **Percy sandbox boundary**: Set standards for isolated Modal sandboxes running against live PII (sandbox isolation, token scoping, network egress, integrity of agent audit logs). - **End-user data path**: Secure the full flow from end-user devices through SDKs into the vault, including PII collection, document capture, and the generative UI layer. - **Document pipeline integrity**: Defend against adversarial inputs (forged documents), including tamper detection, classification, and fraud checks. - **Product security in compliance programs**: Own the technical product-security controls inside SOC 2 Type 2, PCI DSS Level 1, GDPR, and ISO 27001—technical evidence, remediations, and deep answers for auditors/customer security teams. - **Security testing & remediation**: Scope and run technical pentests; drive vulnerability remediation through to resolution. --- ### Tech Stack Rust • TypeScript • Postgres • AWS (Nitro Enclaves, KMS, IAM, VPC, CloudTrail, GuardDuty) • Modal • Vercel --- ### Must-Have - **5+ years** hands-on security engineering (application and/or infrastructure) - Strong understanding of **encryption, key management, and access control**—able to audit production systems handling millions of PII records and identify weaknesses precisely - Deep knowledge of **code execution environment escape**, enforcing **least privilege** on ephemeral compute, and how **cross-tenant leaks** occur - **Offensive experience**: pen testing, threat modeling, or vulnerability research that changed how you build - Hands-on AWS security experience: **IAM, VPC, KMS, CloudTrail, GuardDuty** - Experience through **SOC 2 or PCI DSS audits**, translating real controls into auditor-accepted evidence - Shipped security fixes you weren’t assigned—find gaps and close them proactively --- ### Nice-to-Have - Experience securing **AI/LLM agent systems** or autonomous code execution (Percy is a fast-growing surface) - Experience with **trusted execution environments** (AWS Nitro Enclaves, Intel SGX) - Experience with **document fraud detection** or **adversarial robustness** for ML pipelines - **Rust** experience (vault/core services are built in Rust) - Security tooling experience (SAST/DAST/CI-CD gates) - Knowledge of **KYC / identity verification** context --- ### Succes
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.