Staff Security Engineer — AI Platform & Compliance Lead

Flow Engineering; Greater London; On-site; GBP 120,000 - 190,000; Full time

Benefits offered by this job

Equity

Health insurance

Dental coverage

Vision coverage

Flexible time off

Job summary

Flow Engineering, an AI-native requirements platform, is seeking a Staff Software Engineer to own security for defense‑aerospace grade products. You will define the security architecture, harden the platform, and shape the compliance posture, including securing LLM-driven workflows.

You will lead security across the stack, drive SOC 2 readiness, implement threat modeling, and collaborate with product and customers to maintain trust while scaling in cloud environments.

Qualifications

• 8+ years building production software.
• Deep experience in application and cloud security.
• Experience in regulated or high-trust environments and SOC 2.
• Threat modeling, secure architecture, and incident response.
• Experience securing AI/LLM systems.
• Willing to lead security at a startup.

Responsibilities

• Define security architecture and lead platform hardening.
• Own security across application and cloud infrastructure.
• Drive SOC 2 readiness and export control / ITAR compliance.
• Secure AI and agentic systems and guardrails.
• Build security tooling for detection, monitoring, and vulnerability management.
• Stand up incident response and run postmortems.
• Collaborate with sales and product to pass security reviews.

Skills

Production software experience

Cloud security (AWS/GCP/Azure)

Security architecture & threat model

SOC 2/compliance experience

AI/LLM security

Startup security leadership

Tools

AWS

Azure

GCP

Job description

Flow Engineering, an AI-native requirements platform, is seeking a Staff Software Engineer to own security for defense‑aerospace grade products. You will define the security architecture, harden the platform, and shape the compliance posture, including securing LLM-driven workflows.

You will lead security across the stack, drive SOC 2 readiness, implement threat modeling, and collaborate with product and customers to maintain trust while scaling in cloud environments.