About this role
About the company
Our client is a software company.
The role
Raydar is recruiting for this role on behalf of our client. Take charge of security for a software product and the business behind it, covering design reviews, product-level protections, outside assurance work and incident preparedness. The role blends hands-on engineering with setting standards and communicating risk to technical and non-technical audiences.
What you'll do
-
Hold overall responsibility for security across application, cloud and network layers.
-
Run design reviews and threat assessments for new systems with few established patterns.
-
Engineer protective features directly into the product, such as customer data separation, safe secret usage, human sign-off steps and detailed activity records.
-
Author the security documentation that prospective technical customers read before adopting the product.
-
Coordinate third-party testing, compliance programs and customer security questionnaires and reviews.
-
Lead incident preparedness and response, including fast notification commitments.
-
Maintain ongoing cloud access auditing and automate automated security checks within build and deployment pipelines.
-
Define internal policies for handling sensitive customer secrets, outbound data and device management.
-
Requirements
-
What we're looking for
-
At least 4 years of hands-on experience in application and infrastructure security.
-
Solid coding ability in a modern language such as Python or Go.
-
Practical skill at assessing threats and finding vulnerabilities.
-
Working knowledge of network security and identity-centered access controls for services and workloads.
-
Strong grounding in security on a leading cloud platform, including federated identity and codified infrastructure.
-
Skill at explaining risk and trade-offs to both engineers and senior business leaders.
-
Comfort operating independently in ambiguous situations.
-
Willingness to work in the office five days a week in a fast-paced startup setting.
-
Bonus points
-
Background securing autonomous or code-running systems.
-
Deep knowledge of workload isolation and system hardening techniques.
-
Experience in offensive security or penetration testing.
-
Experience operating a vulnerability reporting or reward program.
-
A track record of guiding a company through audits and customer security reviews.
-
Familiarity with corporate IT environments and access management tooling.
-
Benefits
-
Compensation and benefits
-
Base salary: USD 200,000 to 300,000 per year
-
Health insurance
-
Flexible time off
-
Location and work model
-
San Francisco, CA, United States
-
On-site, five days per week
-
Full-time