Founding Security Engineer

Title: Founding Security Engineer

Duration: Full Time/Direct Hire

Location: Onsite at 135 W 26th St, New York, NY 10001 + 30 Days PTO and 30 days remote per year + Relocation Support available.

Comp range: Up to base $320K + Equity (Willing to pay above for the right one)

Work Authorization: Open to Visa transfer (OPT, H1B) & sponsorship (H1B, TN)

Interview Process: 4 rounds!

Why you should join

1. Modern PaaS that runs in your own cloud. They deploy production-grade Kubernetes infrastructure directly into customers' AWS/GCP/Azure accounts — giving startups enterprise-grade reliability without the DevOps overhead.
2. YC-backed and coming off a recent Series A, solving one of the hardest problems in cloud infra. You'd join early enough to shape the platform's architecture and work directly with top customers brokering six- and seven-figure deals.
3. You ARE the product here. Unlike being back-office infra at a big company, your work directly powers every customer deployment — and you'll own the infrastructure management system end-to-end across three major clouds.

Hiring manager notes:

Must Have:

1. Currently writes production application code as a SWE, not a pure DevOps/SRE
2. Cloud and container security experience (AWS IAM, Kubernetes, security logging, secret management, network security)

Required:

1. 4+ years of experience as an infrastructure/platform engineer
2. Built or contributed to core infra at an infrastructure company (PaaS, IaaS, cloud platform, or IDP company) or a company with a very high bar for engineering talent
3. Application security experience (authn/authz, vulnerability research, secure development practices)
4. Proficiency in Go
5. Multi-cloud experience (AWS, GCP, or Azure)

Nice to Have:

1. Experience as a founding security engineer or security-focused engineer building customer-facing security features
2. BS in CS or equivalent technical degree

Red Flag:

• Contractors or consultants
• Pure DevOps profiles — set up infra but didn't write software to manage it
• Non-infrastructure companies unless they are known to hire top engineers (must be better than FAANG)
• Resumes heavy on buzzwords (Helm, Terraform, CI/CD) without depth in any one area

What we're looking for:

We are looking for a Founding Security Engineer to own both internal and customer-facing security at a cloud infrastructure company where security is core to the product. You'll be a software engineer first – someone who loves thinking about security in and around the cloud and is eager to build the systems that protect hundreds of customers' production infrastructure. This is a rare opportunity to be the first dedicated security hire at a company that lives inside its customers' AWS, GCP, and Azure accounts – meaning the security challenges here are uniquely high-stakes and deeply technical. You'll work directly with top customers, shape the security roadmap from scratch, and build features that let engineering teams trust clients with their most sensitive infrastructure.

What you will be doing

• Founding the Secure Engineering function – driving the internal security roadmap and championing security best practices across a flat, ~20-person engineering org
• Building and shipping customer-facing security products that raise the bar for every company running on clients – so their security teams don't have to
• Writing production Go code to harden multi-cloud infrastructure (AWS, GCP, Azure) and Kubernetes clusters deployed into hundreds of customer accounts
• Owning cloud and container security end-to-end – IAM, network security, secret management, workload isolation, and security logging across three major clouds
• Engaging directly with customers' security engineers to build trust, scope requirements, and ensure clients' managed infrastructure meets or exceeds their security standards

Tech stack

Go, Kubernetes, AWS, GCP, Azure, Terraform, Docker, SQL, IAM