Lead Security Engineer
New
J
JobgetherSaaS technology
Based in France, UTC-3 to UTC+3Full-TimeSenior
SalaryAnnual base salary ranging from $171,100 to $222,880. Equity: Additional equity opportunities as part of the overall compensation package.
Apply NowOpens the employer's application page
Job Details
- Experience
- Significant experience as a senior security engineer or security lead
- Required Skills
- AWSKubernetesOAuthTypeScript
Requirements
- Have significant experience as a senior security engineer or security lead, ideally as the most senior security specialist in an organization without a CISO above you.
- Bring hands-on application and API security expertise in multi-tenant SaaS environments, preferably involving public APIs.
- Understand authorization models, OAuth, OIDC, authentication and session management, IDOR, SSRF, and threat modeling.
- Be able to identify, investigate, and remediate security vulnerabilities.
- Have strong programming skills, particularly in TypeScript, and be able to navigate, modify, and contribute to existing codebases.
- Have experience leading security incidents end-to-end, including technical response, stakeholder communications, customer updates, and postmortems.
- Have working knowledge of AWS, Kubernetes, and Cloudflare, or comparable technologies.
- Have experience managing or contributing to SOC 2 or similar compliance programs; automating evidence collection is preferred.
- Have experience operating or triaging vulnerability disclosure or bug bounty programs.
- Be familiar with modern AI tools and understand security risks associated with AI-powered systems and agents.
- Be able to work in remote, asynchronous environments with clear written communication, documentation, accountability, and follow-through.
Responsibilities
- Define the security strategy and roadmap, set priorities and standards, and drive execution across the organization.
- Identify security gaps and build tools, automation, and processes with other security engineers.
- Integrate security into the software development lifecycle through pull request reviews, threat modeling, dependency management, secrets detection, and software supply chain security.
- Manage day-to-day security operations, internal support, maintenance, and continuous improvements while automating manual processes.
- Lead security incidents from detection through resolution, including communications, customer updates, and postmortems.
- Participate in the engineering-wide on-call rotation and organize incident response exercises.
- Assess and secure AI-powered systems, including agents, MCP servers, connectors, and in-product AI features.
- Manage vulnerability disclosure activities, assess reports, prioritize findings, and coordinate remediation.
- Oversee SOC 2 and Meta platform compliance initiatives and support security questionnaires and Trust Center resources.
- Partner with product engineering teams on technical specifications, security reviews, and security champions.
View Full Description & ApplyYou'll be redirected to the employer's site
