Founding Security Engineer

Code Red Partners; United States; On-site; USD 120,000 - 190,000; Full time

Job summary

Code Red Partners is seeking an experienced security leader to build and run our security program across applications, cloud, and operations. You will collaborate with engineering on threat modeling, secure design, and secure integrations, while driving automation and scalable security practices in a fast-paced startup-like setting.

The role emphasizes hands-on incident response, vulnerability remediation, and the development of robust tooling and detection capabilities to protect production

Qualifications

• 5–10+ years of hands-on experience in product security, application security, or security engineering.
• Experience building security programs in a startup or growth-stage environment with limited existing security infrastructure.
• Strong coding skills and a track record of building security tools, automation, and detection systems.
• Deep experience with incident response, infrastructure security, and securing system integrations.
• Solid application security fundamentals, including threat modeling, secure code review, vulnerability management, and software supply-chain security.

Responsibilities

• Own security from the ground up, building and deploying tooling across application security, cloud infrastructure, and operational security decisions.
• Identify and remediate vulnerabilities across production systems, development pipelines, and deployment infrastructure.
• Lead incident response end-to-end, including investigation, containment, remediation, and post-incident reviews.
• Partner directly with engineering on threat modeling, secure design reviews, code security, and infrastructure decisions.
• Build scalable security practices, automation, and detection capabilities while operating autonomously in a fast-moving environment.

Skills

Product security

Application security

Security tooling

Incident response

Threat modeling

Tools

Python

Cloud security tooling

CI/CD security integration

Job description

• Own security from the ground up, building and deploying tooling across application security, cloud infrastructure, and operational security decisions.
• Identify and remediate vulnerabilities across production systems, development pipelines, and deployment infrastructure.
• Lead incident response end-to-end, including investigation, containment, remediation, and post-incident reviews.
• Partner directly with engineering on threat modeling, secure design reviews, code security, and infrastructure decisions.
• Build scalable security practices, automation, and detection capabilities while operating autonomously in a fast-moving environment.

Qualifications:

• 5–10+ years of hands‑on experience in product security, application security, or security engineering.
• Experience building security programs in a startup or growth‑stage environment with limited existing security infrastructure.
• Strong coding skills and a track record of building security tools, automation, and detection systems.
• Deep experience with incident response, infrastructure security, and securing system integrations.
• Solid application security fundamentals, including threat modeling, secure code review, vulnerability management, and software supply‑chain security.