Member of Technical Staff - Security
WithCoverage2 months ago
Base Salary
$180k - $275k/yr
Responsibilities
- Design and ship security improvements across application code and AWS infrastructure
- Build authentication, authorization, RBAC, ABAC, tenant isolation, IAM, secrets management, encryption, logging, secure networking, and other foundational controls
- Translate SOC 2, HIPAA, and customer requirements into technical controls and automate evidence collection, access reviews, vulnerability detection, configuration monitoring, remediation, incident response, and recovery
- Protect AI agents, sensitive client data, production systems, endpoints, corporate identities, office networks, physical access, and vendors
- Address AI-specific risks including prompt injection, excessive tool permissions, data leakage, and unsafe autonomous actions
- Build reusable modules, paved roads, and automated guardrails that enable secure engineering velocity
- Make pragmatic build-versus-buy decisions and develop focused internal security capabilities where appropriate
Requirements
- 4+ years of experience building or securing software and infrastructure in production environments
- Hands-on experience securing AWS environments and knowledge of IAM, networking, Linux, containers, infrastructure as code, CI/CD, secrets management, encryption, logging, and vulnerability management
- Experience building or substantially improving authentication, authorization, RBAC, ABAC, multi-tenant isolation, or other security-critical product infrastructure
- Strongly preferred experience preparing for SOC 2 or HIPAA
- At least 2 years at the same company in a prior role, with demonstrated promotions, growth, or meaningful recognition
- Ability to move from identifying risks to writing, deploying, and operating solutions
- Ability to prioritize meaningful risks, communicate clearly with technical and non-technical teams, and use AI to multiply output
Benefits
- Competitive compensation including equity grants
- Medical, dental, vision, life, and disability benefits
- Pre-tax FSA, HSA, dependent care FSA, and commuter savings accounts
- 401(k) through Human Interest
- Flexible time off, sick leave, family and medical leave, and major national holidays
- Full-time, on-site role in the New York office
- Curated in-office employee experience and collaborative culture
About WithCoverage
WithCoverage is an insurance brokerage and risk-management platform for growing businesses, combining an expert advisory team with AI-driven software for coverage design, placement, and ongoing management. The privately held company is headquartered in New York and serves brands such as GoPuff, Bombas, Eight Sleep, and Blank Street. It was founded by JD Ross and Max Brenner and is venture-backed by investors including Sequoia, 8VC, and Khosla Ventures.