3 months ago
Base Salary
$180k - $280k/yr
Responsibilities
- Harden Vapi’s security posture, shift security left, catch regressions during code review and CI, and secure multi-tenant infrastructure.
- Build security automation, including agentic penetration tests against staging before releases and automated issue remediation.
- Own the compliance roadmap with InfoSec, including Drata workflows and audit-readiness automation.
- Partner with Engineering, InfoSec, and GRC to build practical developer security guardrails.
- Advise Sales and GTM and support enterprise customer confidence in Vapi’s security posture.
Requirements
- 5–10 years of engineering experience, including significant experience with modern cloud-native SaaS.
- Strong understanding of security for multi-tenant cloud environments serving regulated enterprise customers and integrating with third parties.
- High proficiency writing and reviewing code and delivering security fixes directly.
- Experience with shift-left security practices across code and testing.
- Collaborative experience working with security, engineering, and GRC partners.
- Direct experience securing CI/CD pipelines is preferred.
- Backend software engineering experience is preferred.
- Experience with SOC 2, ISO 27001, HIPAA, and Drata is preferred.
- Familiarity with VoIP or telephony security and real-time system failure modes is preferred.
Benefits
- Competitive compensation with a strong base salary and meaningful equity ownership.
- Medical, dental, and vision coverage.
- Flexible take-what-you-need vacation policy.
- Catered lunches and dinners on in-office days.
- Monthly lifestyle and wellness stipends for rent, transportation, food, fitness, and mental well-being.
- Annual professional development stipends for courses, conferences, and upskilling.
- Regular offsites and team events.
- The role is a hands-on senior individual contributor or lead position in Core Engineering.
