Founding Security Engineer — Cloud & App Security Leader

Promise; Washington (District of Columbia); Hybrid; USD 180,000 - 240,000; Full time

Benefits offered by this job

Stock options

Health coverage

Hybrid work

Flexible time off

Job summary

Promise is seeking a Founding Security Engineer to accelerate our business and ensure a high standard of security for clients. You will work with builders of varying depth to embed security into product design and drive important security outcomes in a rapidly evolving tech landscape.

You will tackle hands-on security across cloud networking, Kubernetes, and application security, while building pragmatic upgrades and automation. This role fits someone who thrives on big challenges and ownership.

Qualifications

• 5–10 years of experience with meaningful time focusing on security.
• Strong understanding of cloud security and networking (GCP preferred).
• Comfortable reading code and shipping fixes; Python scripting strongly preferred.
• Experience operating security tooling (endpoint/EDR, MDM, audit logging/alerting, CSPM).
• Familiarity with GitHub, Terraform, and CI/CD security fundamentals.

Responsibilities

• Partner with engineering to embed security into product design and implementation.
• Build and run detection: write/tune Python-based rules to catch anomalous activity.
• Secure GCP cloud networking and improve Kubernetes security with Infrastructure team.
• Strengthen application security and upgrade dependencies (Next.js, etc.).
• Improve security through code + automation (guardrails, remediation workflows).
• Own vulnerability management end-to-end and coordinate fixes with codeowners.
• Develop infrastructure to increase velocity while upholding security.
• Develop technical and policy frameworks for AI adoption across the company.

Skills

Security engineering

Cloud security

Python scripting

Security tooling

GitHub

Terraform

CI/CD security

Tools

GCP

Kubernetes

Job description

Promise is seeking a Founding Security Engineer to accelerate our business and ensure a high standard of security for clients. You will work with builders of varying depth to embed security into product design and drive important security outcomes in a rapidly evolving tech landscape.

You will tackle hands-on security across cloud networking, Kubernetes, and application security, while building pragmatic upgrades and automation. This role fits someone who thrives on big challenges and ownership.