The role, as published
About the company
Our client is a software company.
The role
Raydar is recruiting for this role on behalf of our client. Take charge of security for a software product and the business behind it, covering design reviews, product-level protections, outside assurance work and incident preparedness. The role blends hands-on engineering with setting standards and communicating risk to technical and non-technical audiences.
What you'll do
- Hold overall responsibility for security across application, cloud and network layers.
- Run design reviews and threat assessments for new systems with few established patterns.
- Engineer protective features directly into the product, such as customer data separation, safe secret usage, human sign-off steps and detailed activity records.
- Author the security documentation that prospective technical customers read before adopting the product.
- Coordinate third-party testing, compliance programs and customer security questionnaires and reviews.
- Lead incident preparedness and response, including fast notification commitments.
- Maintain ongoing cloud access auditing and automate automated security checks within build and deployment pipelines.
- Define internal policies for handling sensitive customer secrets, outbound data and device management.
What we're looking for
- At least 4 years of hands-on experience in application and infrastructure security.
- Solid coding ability in a modern language such as Python or Go.
- Practical skill at assessing threats and finding vulnerabilities.
- Working knowledge of network security and identity-centered access controls for services and workloads.
- Strong grounding in security on a leading cloud platform, including federated identity and codified infrastructure.
- Skill at explaining risk and trade-offs to both engineers and senior business leaders.
- Comfort operating independently in ambiguous situations.
- Willingness to work in the office five days a week in a fast-paced startup setting.
Bonus points
- Background securing autonomous or code-running systems.
- Deep knowledge of workload isolation and system hardening techniques.
- Experience in offensive security or penetration testing.
- Experience operating a vulnerability reporting or reward program.
- A track record of guiding a company through audits and customer security reviews.
- Familiarity with corporate IT environments and access management tooling.
Benefits
- Health insurance
Location and work model
- San Francisco, CA, United States
- On-site, five days per week
- Full-time
Compensation, as the posting describes it
- Flexible time off