AI Platform Security Lead – End-to-End Risk & Tooling

Mode Analytics; Phoenix (AZ); Sur place; USD 130 000 - 190 000; Plein temps

Résumé du poste

Foundation Capital is seeking a Security Engineer to join the AI Platform Security team. This role emphasizes ownership and setting direction, owning security outcomes for a portfolio of products, and defining how security reviews and standards operate across the organization.

You will push for risk-informed decisions, build tooling, and drive security integration across the SDLC. The ideal candidate will have hands-on security engineering experience and a track record of independent program

Qualifications

• Security engineer with strong application security expertise and ownership mindset.
• Ability to design reviews, threat models, and risk acceptance for a portfolio of products.
• Experience leading vulnerability management and bug bounty programs.
• Proficiency in Python/ JS/ Go/ Java and ability to read and reason about unfamiliar codebases.

Responsabilités

• Own end-to-end security for an assigned portfolio of products, including reviews, threat modeling, risk acceptance, and driving high-severity findings to closure.
• Define the security review bar, standards, checklists, and intake processes used by engineers across the org.
• Lead vulnerability management and bug bounty program operations, including triage, escalation, SLA ownership, and program evolution.
• Design and build security automation and tooling to reduce manual toil and scale coverage.

Connaissances

Security engineering

Application security

Threat modeling

Vulnerability management

CI/CD security

Programming (Python/JS/Go/Java)

Communication

Formation

Bachelor's degree in Computer Science

Outils

Snyk

Burp Suite

DAST

SAST

Description du poste

Foundation Capital is seeking a Security Engineer to join the AI Platform Security team. This role emphasizes ownership and setting direction, owning security outcomes for a portfolio of products, and defining how security reviews and standards operate across the organization.

You will push for risk-informed decisions, build tooling, and drive security integration across the SDLC. The ideal candidate will have hands-on security engineering experience and a track record of independent program