Senior Security Engineer
Macroscope8 months ago
Responsibilities
- Design and implement security architecture, controls, and secure-by-default practices across distributed systems, infrastructure, and APIs.
- Lead projects that protect customer data, harden the production environment, and raise security standards across shipped products.
- Establish engineering best practices for identity and access management, cloud security, secure CI/CD, secrets management, vulnerability management, and production monitoring.
- Partner with founders, engineers, and the designer on architectural decisions shaping the product and company.
- Help the engineering team move quickly while maintaining enterprise-grade security.
Requirements
- Deep experience securing distributed backend systems at scale, including threat modeling and pragmatic production defenses.
- Proven experience building and scaling products and embedding security into architecture, code, and developer workflows.
- Strong expertise in secure system design for resilient, performant, and maintainable services and APIs.
- Strong proficiency with cloud environments, ideally Google Cloud Platform, including networking, IAM, organization policies, monitoring, and infrastructure-as-code.
- Experience leading security or engineering projects and driving architectural decisions in high-growth teams.
- Hands-on experience with secrets management, key management, cryptography basics, and secure data handling.
- Strong experience with Go is highly preferred.
- Bonus experience securing AI/ML systems such as LLM and RAG applications, including private-data protection, leakage prevention, and security guardrails.
- Bonus exposure to Temporal as a worker management system.
Tech Stack
About Macroscope
Macroscope superpowers software teams so that everyone has the advantage. Leaders get an accurate birds eye view of how the codebase and product is evolving, on-demand without ever having to interrupt engineers. Engineers save time by getting direct access to all the information about the codebase and automate code reviews that find correctness issues before they get to production. And we power all of this from a single source of truth - the codebase itself.