Staff Software Engineer - Security
Flow Engineering29 days ago
Base Salary
$240k - $300k/yr
Responsibilities
- Own security architecture across the platform, including threat modeling, secure design reviews, and security standards.
- Harden application security and cloud infrastructure, including identity, networks, secrets, tenant isolation, and data protection.
- Drive SOC 2 and prepare the platform for defense and aerospace certifications, including export control and ITAR requirements.
- Secure AI and agentic systems against prompt injection, model-based data leakage, unauthorized agent actions, and inadequate guardrails.
- Build security tooling for detection, monitoring, vulnerability management, and CI/CD.
- Establish and run incident response from detection through postmortems.
- Partner with sales and product on security reviews and customer confidence.
Requirements
- 8+ years building production software, including running secure services at scale in the cloud.
- Deep experience in application and cloud security across AWS, GCP, or Azure, including identity and access, secrets, network security, and data protection.
- Experience owning security in a regulated or high-trust environment and implementing SOC 2.
- Experience with threat modeling, secure architecture, and incident response.
- Experience securing AI or LLM systems.
- Export control, ITAR, or FedRAMP experience is a plus.
- Ability to serve as the security lead at a startup and set the agenda independently.
Benefits
- Competitive salary and meaningful equity.
- Health, dental, and vision coverage.
- Flexible time off and support for experimentation, learning, and staying current with the AI ecosystem.
Categories
About Flow Engineering
Design, build, test, and iterate physical systems in hours, not months. Backed by Sequoia Capital, Patrick and John Collison, and David Helgason. Used by Rivian, Joby, Astranis, and Radiant.