Founding Security Engineer

Wise Insight; San Francisco (CA); On-site; USD 150,000 - 210,000; Full time

Job summary

Wise Insight seeks a senior security engineer to define and own security architecture across product, infra, and AI/LLM pipelines. You will partner with engineering teams, perform threat modeling, and coordinate vulnerability management to establish secure design patterns.

The role requires 7–15 years in security or related fields, with hands-on experience in application and infrastructure security, and a proven track record building security programs. On-site in SF, visa-friendly.

Qualifications

• 7 to 15 years of experience in security engineering or software engineering with a subsequent transition into security.
• Hands-on experience across both application security and infrastructure security.
• Experience building or establishing a security program from the ground up.
• Strong understanding of threat modeling, vulnerability assessment, penetration testing, vulnerability scanning, and risk prioritization.
• Ability to read and review code and identify security vulnerabilities.
• Strong understanding of cloud security architecture.
• Experience with multi-tenant environments and tenant isolation.
• Ability to work closely with software and infrastructure engineers on secure system design.
• Strong communication skills and the ability to explain technical security issues to engineering teams and business stakeholders.

Responsibilities

• Define and build the company's security architecture across the product, infrastructure, and AI/LLM pipeline.
• Take ownership of the security program as the first dedicated security engineering hire, reporting directly to the CTO.
• Partner with engineering teams throughout the development lifecycle to identify security risks and establish secure design patterns.
• Perform threat modeling, vulnerability assessments, penetration testing coordination, vulnerability scanning, and risk prioritization.
• Review application and infrastructure code to identify security vulnerabilities and recommend practical remediation.
• Design and strengthen cloud security architecture, with particular focus on multi-tenant isolation and protection of sensitive customer data.
• Partner with infrastructure teams on multi-region architecture and data residency requirements.
• Establish lightweight security policies and processes supporting both practical security and compliance requirements.
• Own internal IT security, including devices, access management, identity, and employee security controls.
• Serve as the technical security point of contact for audits, enterprise security questionnaires, customer reviews, and security assessments.

Skills

Security engineering

Threat modeling

Vulnerability assessment

Penetration testing

Cloud security

Multi-tenant security

Code review

Security program

Cross-team collaboration

Job description

Key Information:

Work Model: On-site, 5 days per week
Employment Type: Full-time
Equity: Highly competitive
Visa: Open to H1B transfers andTN visa
Experience: 7 to 15 years

Key Responsibilities

• Define and build the company's security architecture across the product, infrastructure, and AI/LLM pipeline
• Take ownership of the security program as the first dedicated security engineering hire, reporting directly to the CTO
• Partner with engineering teams throughout the development lifecycle to identify security risks and establish secure design patterns
• Perform threat modeling, vulnerability assessments, penetration testing coordination, vulnerability scanning, and risk prioritization
• Review application and infrastructure code to identify security vulnerabilities and recommend practical remediation
• Design and strengthen cloud security architecture, with particular focus on multi-tenant isolation and protection of sensitive customer data
• Partner with infrastructure teams on multi-region architecture and data residency requirements
• Establish lightweight security policies and processes supporting both practical security and compliance requirements
• Own internal IT security, including devices, access management, identity, and employee security controls
• Serve as the technical security point of contact for audits, enterprise security questionnaires, customer reviews, and security assessments

Requirements

• 7 to 15 years of experience in security engineering or software engineering with a subsequent transition into security
• Hands‑on experience across both application security and infrastructure security
• Experience building or establishing a security program from the ground up
• Strong understanding of threat modeling, vulnerability assessment, penetration testing, vulnerability scanning, and risk prioritization
• Ability to read and review code and identify security vulnerabilities
• Strong understanding of cloud security architecture
• Experience with multi‑tenant environments and tenant isolation
• Ability to work closely with software and infrastructure engineers on secure system design
• Strong communication skills and the ability to explain technical security issues to engineering teams and business stakeholders