Member of Technical Staff, Security Engineering
The Inception Company4 months ago
San Mateo, CA, USAStaff+
Responsibilities
- Build security tools, secure software systems, and automated security best practices, spending 70%+ of the role writing code.
- Design enterprise security architecture and threat models for customer-facing APIs and enterprise deployments.
- Lead product and API security for a public API serving enterprise customers.
- Drive SOC 2 Type 2 readiness, ISO 27001 certification efforts, GDPR compliance, and enterprise security readiness.
- Own VPC design, network isolation, access controls, incident response, security monitoring, and operational visibility.
- Build and maintain secure infrastructure, automation, and internal tools across product, platform, and enterprise systems.
- Establish secure development, code review, release management, vulnerability management, and incident response practices.
- Partner with engineering teams to review architectures, address security risks, and make pragmatic security tradeoffs.
Requirements
- 6+ years of security engineering experience or equivalent staff-level depth, with experience operating as a TL, TLM, or staff+ engineer who still ships.
- Experience securing enterprise-facing products, APIs, infrastructure, or compliance-heavy environments with customer trust and procurement requirements.
- Hands-on experience with product and API security for customer-facing APIs.
- Experience driving or owning SOC 2, ISO 27001, GDPR, or comparable compliance and certification programs.
- Experience building or owning security systems involving privacy infrastructure, identity and access management, encryption, cloud security controls, mTLS, policy systems, or security services exposed through APIs.
- Proficiency in Python; familiarity with a systems language such as Go, Rust, or C++ is preferred.
- Fluency with modern software development, deployment automation, Kubernetes, Docker, infrastructure as code, and cloud platforms such as AWS or Azure.
- BS, MS, or PhD in Computer Science or a related field, or equivalent experience.
- Ability to work independently in a startup and partner effectively with engineering teams while maintaining customer and developer empathy.