Founding Security Engineer
Quick facts
- Type
- Full-time
- Location
- New York, NY
- Background
- Bachelor's degree
- Skills
- SQL, Docker, Kubernetes, AWS
- Industry
- Information Technology — 667 open jobs
- Visa in listing
- H-1B
- Apply
- Free to apply — never pay anyone for a job offer or visa sponsorship
Job description
🚨 Hiring: Founding Security Engineer | New York, NY
📍 Location: New York, NY
🏢 Work Model: On-site — 5 days/week in office
💼 Type: Full-time
✈️ Relocation Support: Available
🛂 Visa: Open to H-1B transfers and select sponsorship options
We’re looking for a Founding Security Engineer to own both internal and customer-facing security at a cloud infrastructure company where security is core to the product.
This is a rare opportunity to become the first dedicated security engineering hire, helping shape the security function from the ground up while building systems that protect production infrastructure across hundreds of customer environments.
You’ll be a software engineer first — someone who enjoys solving security problems through code, cloud infrastructure, and systems engineering.
🔐 What You’ll Be Doing
- Found the Secure Engineering function and drive the internal security roadmap across a ~20-person engineering organization
- Build and ship customer-facing security products that improve the security posture of every company running on the platform
- Write production Go code to harden multi-cloud infrastructure across AWS, GCP, and Azure
- Secure and harden Kubernetes clusters deployed across hundreds of customer accounts
- Own cloud and container security end-to-end, including IAM, network security, secret management, workload isolation, and security logging
- Work directly with customers’ security engineers to understand requirements, build trust, and ensure managed infrastructure meets or exceeds security standards
✅ What We’re Looking For
Experience
- 4+ years of infrastructure/platform engineering experience
- Experience building or contributing to core infrastructure at a PaaS, IaaS, cloud platform, or internal developer platform company
- Strong candidates may also come from exceptionally high-bar engineering organizations such as Stripe, Ramp, Databricks, etc.
- Must currently be writing production application code as a software engineer
Technical Skills
- Strong Go experience
- Kubernetes and container security
- Cloud security across AWS, GCP, or Azure
- Application security, including authentication, authorization, vulnerability research, and secure development practices
- Experience with IAM, security logging, secrets management, network security, and workload isolation
⭐ Nice to Have
- Previous experience as a founding security engineer
- Experience building customer-facing security features
- BS in Computer Science or equivalent technical degree
🚫 Not a Fit For This Role
- Pure DevOps/SRE profiles without substantial software engineering experience
- Candidates whose background is primarily GRC, compliance, or security operations
- Profiles heavy on Terraform/Helm/CI-CD keywords without deep engineering experience
- Contractors or consultants
🛠 Tech Stack
Go | Kubernetes | AWS | GCP | Azure | Terraform | Docker | SQL | IAM
📩 Interested or know someone who would be a great fit?
DM me or send your profile for consideration.
#Hiring #SecurityEngineer #CyberSecurity #CloudSecurity #ApplicationSecurity #Kubernetes #GoLang #AWS #GCP #Azure #InfrastructureEngineering #SoftwareEngineering #NewYorkJobs #NYCJobs
Visa sponsorship record
No public sponsorship records foundWe didn't find H-1B, H-1B1, E-3 or green card (PERM) filings under the name SourceStack Group in the Department of Labor and USCIS data. That doesn't mean the job can't be sponsored — the company may file under a different legal name, be new to sponsorship, or sponsor a visa that isn't in these datasets (for example H-2B or J-1).
Tip: ask the recruiter early, in writing, which visa they sponsor and whether they cover the legal and filing fees.
Which visas can work for this job
Occupation: Information Security Analysts (SOC 15-1212) — estimated from the job title.
- Mentioned in the listing
H-1B
- H-1B cap-exempt employer
Regular cap-subject employer — a new H-1B needs to win the lottery in March (unless you already hold cap-counted H-1B status).
- TN (citizens of Canada and Mexico)
This kind of role may fit the USMCA profession “Computer Systems Analyst” — it depends on the actual duties. No lottery, no cap; you need the matching degree or license.
- E-3 (Australia) and H-1B1 (Chile, Singapore)
Same degree requirement as H-1B, but no lottery and a separate quota that is rarely filled.
- O-1 (extraordinary ability)
For candidates with awards, publications, press, a high salary or critical roles at distinguished organizations. No cap, no lottery; the employer files a petition.
- STEM OPT extension (F-1 students)
Requires an E-Verify employer. We didn't find this company in the E-Verify list — ask HR.
Salary vs prevailing wage
Information Security Analysts · New York (state median of areas). Annual prevailing wages set by the Department of Labor (OFLC).
| Level | Prevailing wage | H-1B lottery odds* |
|---|---|---|
| Level I | $74,984 | ~15% |
| Level II | $94,318 | ~31% |
| Level III | $112,923 | ~46% |
| Level IV | $131,716 | ~61% |
The listing has no salary, so we can't place it on a wage level. Ask the employer which wage level they'd file at: Level III–IV registrations get 3–4 entries in the H-1B lottery.
* Odds are DHS projections for the FY2027 wage-weighted lottery (actual results vary by year and employer). Since the FY2027 cap season the H-1B lottery is weighted by wage level: Level I = 1 entry, II = 2, III = 3, IV = 4. The level is set by the offered wage against the prevailing wage for the occupation and worksite. Separately, a $100,000 fee for new H-1B petitions for workers outside the US was announced in 2025; as of September 2026 a federal court ruling keeps it unenforceable while appeals continue — check the current status.
Sources: U.S. Department of Labor OFLC disclosure data (H-1B/H-1B1/E-3 LCA, PERM), OFLC prevailing wage data, USCIS H-1B Employer Data Hub, E-Verify participating employers. Data loaded: LCA FY2024–FY2026, PERM, USCIS Data Hub, OFLC wages; updated 2026-10-03. Employers are matched by name, so records of companies with similar names can occasionally be mixed up. This is general information, not legal advice — talk to an immigration attorney about your case.