Cybersecurity Engineer

Sledge; United States; Remote; USD 120,000 - 160,000; Full time

Benefits offered by this job

Fully remote, work from anywhere

Flexible hours

Direct access to founding team

Real ownership over security practice

Build from ground up

Job summary

Sledge is hiring a Cybersecurity Engineer to own security across the stack, including the AWS infrastructure, the Next.js/Express web app, the Supabase/PostgreSQL data layer, and the Python/FastAPI AI system running alongside it. This role reports to Sledge's engineering team and aims to turn security meetings into a real, ongoing security practice.

Fully remote with flexible hours, you will lead vulnerability management, access control, and security monitoring while collaborating with founders

Qualifications

• Required: hands-on experience securing production infrastructure on AWS.
• Required: experience with application security, finding and fixing vulnerabilities in a real web app, not just theory.
• Comfortable working across a Node.js/TypeScript stack, a Python backend, and a PostgreSQL database.
• Comfortable owning security end to end, not just running a scanner and filing tickets.
• Comfortable moving at startup speed, without a large security team behind you.
• A clear communicator who can explain risk to non-security people, including the founders.

Responsibilities

• Own security across Sledge's AWS infrastructure, web app, database, and AI system
• Run and drive Sledge's recurring security meeting, and turn what comes out of it into real fixes
• Set up and maintain security monitoring, logging, and alerting
• Review code and infrastructure changes for security risk before they ship
• Manage access control, secrets, and permissions across environments
• Own vulnerability management: finding issues, prioritizing them, and getting them fixed
• Support Sledge's data processing agreements, privacy policy, and other security-relevant commitments with real technical practice behind them
• Lead incident response if something does go wrong

Skills

AWS security

Application security

Node.js/TypeScript

Python backend

PostgreSQL

Security communication

Vulnerability management

Incident response

Job description

About Sledge

From bid to build to paid. From the office to the field to the entire company. Sledge is Construction AI.Sledge is the agentic, AI-native operating system for construction, handling the busywork of running a construction business so builders can spend more time building and less time on paperwork. Built for subcontractors and small to mid-size general contractors, Sledge is already live with a growing group of beta users. Sledge already runs a recurring security meeting and takes it seriously, this role is what turns that into a real security practice.

About the role

Sledge is hiring a Cybersecurity Engineer to own security across the stack: the AWS infrastructure, the Next.js/Express web app, the Supabase/PostgreSQL data layer, and the Python/FastAPI AI system running alongside it. This role reports to Sledge's engineering team. Sledge already holds a recurring security meeting with its own Slack channel, and this role is what turns that into a real, ongoing security practice instead of a standing meeting.Sledge handles contractor bids, payments, and business data, and that only gets more sensitive as Sledge grows. This is a build-and-defend role, not a compliance-checkbox role.

What you'll do

• Own security across Sledge's AWS infrastructure, web app, database, and AI system
• Run and drive Sledge's recurring security meeting, and turn what comes out of it into real fixes
• Set up and maintain security monitoring, logging, and alerting
• Review code and infrastructure changes for security risk before they ship
• Manage access control, secrets, and permissions across environments
• Own vulnerability management: finding issues, prioritizing them, and getting them fixed
• Support Sledge's data processing agreements, privacy policy, and other security-relevant commitments with real technical practice behind them
• Lead incident response if something does go wrong

What we're looking for

Must-haves

• Required: hands-on experience securing production infrastructure on AWS
• Required: experience with application security, finding and fixing vulnerabilities in a real web app, not just theory
• Comfortable working across a Node.js/TypeScript stack, a Python backend, and a PostgreSQL database
• Comfortable owning security end to end, not just running a scanner and filing tickets
• Comfortable moving at startup speed, without a large security team behind you
• A clear communicator who can explain risk to non-security people, including the founders

Nice-to-haves

• Experience with SOC 2, data processing agreements, or similar compliance frameworks
• Experience securing AI or LLM-powered systems specifically
• Experience with penetration testing or red-teaming
• Interest or experience in construction, trades, or B2B software
• Experience building a security practice from scratch at an early-stage startup

Perks and benefits

• Fully remote, work from anywhere in the world
• Flexible hours, work when you're most productive
• Direct access to the founding team and engineering, no layers of management
• Real ownership over Sledge's security practice, built from the ground up
• You set the standard, not follow one someone else already set

Equal opportunity

Sledge is an equal opportunity employer. Sledge welcomes applicants of every background and does not discriminate on the basis of race, color, religion, sex, national origin, age, disability, or any other protected status.