Founding Security Engineer - Remote & Hands-On

Staffing Science; United States; Remote; USD 180,000 - 240,000; Full time

Job summary

Staffing Science is seeking a Founding Security Engineer to join a Series B dev infrastructure company as the first security hire. You will stand up detection and response from scratch, own security tooling, and partner with engineers to embed security into the product from day one.

This role is fully remote in the United States, requires hands-on cloud security, IaC with Terraform, SAST/SCA integration, and a willingness to build processes rather than operate a large existing program.

Qualifications

• 5+ years hands-on security engineering in software/cloud-native environments.
• Ability to code or script.
• Strong application security experience and vulnerability remediation partnered with devs.
• Hands-on Infrastructure as Code experience, especially Terraform.
• AWS security expertise and Cloudflare experience or aptitude to learn quickly.
• Experience deploying and managing EDR/MDM across mixed environments.

Responsibilities

• Set up detection and response from scratch (SIEM or outsourced SOC).
• Hardening AWS IAM, GuardDuty, Security Hub and Cloudflare security controls.
• Integrate security scanning (SAST/SCA) into CI/CD pipelines with IaC (Terraform).
• Secure endpoints across Mac-heavy dev fleets and production infra.
• Own software supply chain security (SBOMs, SLSA, dependency scanning).
• Engage with engineers in design reviews and threat modeling to fix vulnerabilities.

Skills

Security engineering

Coding

Threat modeling

Tools

Terraform

Checkov

tfsec

Snyk

Semgrep

GitHub Advanced Security

Job description

Staffing Science is seeking a Founding Security Engineer to join a Series B dev infrastructure company as the first security hire. You will stand up detection and response from scratch, own security tooling, and partner with engineers to embed security into the product from day one.

This role is fully remote in the United States, requires hands-on cloud security, IaC with Terraform, SAST/SCA integration, and a willingness to build processes rather than operate a large existing program.