Senior Software Security Engineer
Fieldguide1 day ago
Base Salary
$215k - $230k/yr
Responsibilities
- Partner with engineering teams to identify system risks before release and build secure frameworks and libraries that encourage control adoption.
- Build and maintain identity and secrets management systems, including credential issuance, rotation, and workload authentication.
- Harden cloud security controls and support cloud security posture management through infrastructure-as-code scanning, misconfiguration detection, and automated remediation.
- Design security models for AI agents, including permission boundaries, prompt-injection defenses, and strict tenant isolation.
- Raise engineering security standards through design reviews and coaching.
Requirements
- 5+ years of software engineering experience building and maintaining security-relevant systems in production.
- Experience leading a security initiative from design through adoption.
- Hands-on experience with identity and secrets management, including OAuth 2.0 and OIDC.
- Familiarity with Kubernetes security primitives including RBAC, namespaces, network policies, and admission controllers.
- Ability to reason about trust boundaries and threat models and prioritize risk.
- Bonus: experience with SAST, dependency scanning, secure build infrastructure, SAML, SPIFFE/SPIRE, workload authentication systems, or securing LLM-based and agentic systems.
Benefits
- Competitive compensation packages with meaningful ownership.
- Flexible PTO, 401k, wellness benefits including free therapy sessions, technology and work-from-home reimbursement, and flexible work schedules.
- Remote-first work environment; Fieldguide is based in San Francisco, California.
Tech Stack
Categories
About Fieldguide
Fieldguide builds an AI-native audit and advisory platform that automates engagement workflows, evidence collection, and compliance reporting for accounting and risk teams. The cloud software combines workflow automation, real-time collaboration, and agent-based AI to support standards across security, regulatory, and risk assessments, sold as subscription SaaS to firms. Founded in 2020 and headquartered in San Francisco, the company is privately held and serves many large audit and advisory practices.