Staff Software Engineer - Security
Flow Engineering7 hours ago
London, United KingdomStaff+
Responsibilities
- Own security architecture across the platform, including threat modeling, secure design reviews, and security standards.
- Harden application and cloud infrastructure security, including identity, network, secrets, tenant isolation, and data protection.
- Drive SOC 2 readiness and prepare for defense and aerospace customer certifications, including export control and ITAR requirements.
- Secure AI and agentic systems against prompt injection, model-based data leakage, unauthorized agent actions, and related risks.
- Build security tooling for detection, monitoring, vulnerability management, and CI/CD.
- Establish and operate incident response from detection through postmortems.
- Partner with sales and product on security reviews and customer confidence.
Requirements
- 8+ years of experience building production software, including operating secure cloud services at scale.
- Deep application and cloud security experience with AWS, GCP, or Azure, including identity and access, secrets, network security, and data protection.
- Experience owning security in a regulated or high-trust environment and implementing SOC 2.
- Experience with threat modeling, secure architecture, and incident response.
- Experience securing AI or LLM systems.
- Ability to act as the security lead at a startup and set the security agenda independently.
- Export control, ITAR, or FedRAMP experience is preferred.
Benefits
- Competitive salary and meaningful equity.
- Health, dental, and vision coverage.
- Flexible time off.
- Support for experimentation, learning, and staying current with the AI ecosystem.
Categories
About Flow Engineering
Flow Engineering builds a SaaS platform for hardware and systems engineering teams to manage requirements, verification/validation, and collaboration across the V‑Model. It serves aerospace, automotive, defense, and robotics companies, with reported users including Rivian, Joby, Astranis, and Radiant. Founded in 2023 and headquartered in San Francisco, the privately held company is backed by Sequoia Capital and other notable investors.