Job description

• US, Remote Fast-growing AI/data infrastructure startup building a modern customer data and AI activation platform used by enterprise customers at significant scale. Backed by top-tier investors with $300M+ raised and operating at $100M+ ARR. Fully remote engineering culture with a strong focus on distributed systems, product ownership, and technical excellence. Compensation • Base salary: $220-320K • Competitive equity package • Remote across US The Opportunity This is the company’s first dedicated security hire and a rare chance to build the application security function from the ground up. You’ll own application and product security end-to-end while partnering directly with engineering leadership on some of the company’s most critical infrastructure and scaling challenges. This is a deeply technical, hands-on IC role — not a compliance or policy-heavy security position. The ideal person will spend the majority of their time in architecture reviews, codebases, threat modeling, and designing secure systems at scale. What You’ll Work On • Designing and improving multi-tenant isolation for systems processing massive data volumes • Building authorization and sub-tenant access control models • Threat modeling and hardening distributed systems and customer-facing APIs • Improving security architecture across multi-cloud and multi-region infrastructure • Supporting data residency, privacy, and compliance-related technical controls (GDPR/CCPA) • Partnering closely with backend and distributed systems engineering teams • Defining long-term application security best practices and roadmap Ideal Background • 6+ years of experience in application/product security engineering • Previously one of the first security hires (ideally first 1–3) at a SaaS or data infrastructure company • Strong distributed systems and large-scale infrastructure knowledge • Experience securing multi-tenant platforms and customer-facing APIs • Background in cloud security across AWS/GCP/Azure environments • Able to read production application code and ship security-focused engineering solutions • Strong preference for engineers with a software engineering or CS foundation • Open to former/current security managers looking to move back into hands-on IC work Nice to Have • Experience with data infrastructure or high-scale event processing systems • Privacy/security experience involving PII handling, data residency, or GDPR/CCPA controls • Experience working in fast-growth engineering organizations • Background at modern B2B SaaS, infrastructure, developer tooling, or security-focused companies What They’re NOT Looking For • Pure offensive security / red team / penetration testing profiles • Compliance-only or governance-heavy security backgrounds • Traditional corporate IT security engineers disconnected from product engineering • Candidates without strong application security and distributed systems depth Tech Stack • TypeScript • Go • AWS / Azure / GCP • Multi-cloud distributed infrastructure Why Candidates Should Join • First dedicated security hire with massive ownership and visibility • Opportunity to define security architecture for a rapidly scaling platform • Work directly with senior engineering leadership • Company operating at meaningful scale: high-throughput APIs, multi-region infrastructure, enterprise customers, and large-scale data systems • Strong growth trajectory with top-tier investors and clear long-term upside Interview Process • Recruiter Screen • Security Architecture / Threat Modeling Interview • Deep Distributed Systems Interview • Hiring Manager Interview • Security Program / Cross-Functional Collaboration Interview Apply Now More Openings • Founding Security Engineer (Remote) • US, Remote • Engineering Mangaer, Object Storage (Remote) • US, Remote • Remote Senior AI/.NET Engineer • New York, NY • Senior Security Engineer (Remote, NY, DC) • US, Remote Share This Job

Requirements

Must-haves

What You’ll Work On
Designing and improving multi-tenant isolation for systems processing massive data volumes
Building authorization and sub-tenant access control models
Threat modeling and hardening distributed systems and customer-facing APIs
Improving security architecture across multi-cloud and multi-region infrastructure
Supporting data residency, privacy, and compliance-related technical controls (GDPR/CCPA)
Partnering closely with backend and distributed systems engineering teams
Defining long-term application security best practices and roadmap
Ideal Background
6+ years of experience in application/product security engineering
Previously one of the first security hires (ideally first 1–3) at a SaaS or data infrastructure company
Strong distributed systems and large-scale infrastructure knowledge

Nice-to-haves

Experience with data infrastructure or high-scale event processing systems
Privacy/security experience involving PII handling, data residency, or GDPR/CCPA controls
Experience working in fast-growth engineering organizations
Background at modern B2B SaaS, infrastructure, developer tooling, or security-focused companies
What They’re NOT Looking For
Pure offensive security / red team / penetration testing profiles
Compliance-only or governance-heavy security backgrounds
Traditional corporate IT security engineers disconnected from product engineering
Candidates without strong application security and distributed systems depth
AWS / Azure / GCP
Multi-cloud distributed infrastructure
Why Candidates Should Join

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aiawsgcpazuretypescriptgo

Platform: careers-html
Effort: medium