Head of Security Engineering for AI-Powered B2B Platform

Nuvo; New York, San Francisco (NY, CA); On-site; USD 200,000 - 300,000; Full time

Job summary

Nuvo is redefining the B2B commerce and payments market and is seeking a lead security engineer to stand up security across the product and infrastructure. You will define the security roadmap, influence engineering practices, and protect customer data from day one.

As the first dedicated security hire, you’ll own application and product security, work across cloud infrastructure, detection and response, and compliance as needed, helping the team move fast while staying secure.

Qualifications

• 5+ years in security engineering with application security experience.
• Proven track record building or shaping a security program.
• Strong software engineering fundamentals and code literacy.
• Ability to communicate technical risk clearly.
• Passion for internet technologies and modern systems security.
• Experience in early-stage or fast-growing teams.

Responsibilities

• Own application and product security end-to-end, threat modeling and secure design.
• Build the security function: roadmap, best practices, tooling, standards.
• Remediate vulnerabilities across product and infrastructure.
• Secure cloud/infrastructure: IAM, secrets, network, Kubernetes, logging, SOC 2.
• Embed security into engineering culture and coach the team.
• Use the best tools to maximize impact and minimize risk.

Skills

Security engineering

Security program

Engineering fundamentals

Risk communication

Internet technologies

Early-stage experience

Tools

Vue

GraphQL

DSL

Job description

Nuvo is redefining the B2B commerce and payments market and is seeking a lead security engineer to stand up security across the product and infrastructure. You will define the security roadmap, influence engineering practices, and protect customer data from day one.

As the first dedicated security hire, you’ll own application and product security, work across cloud infrastructure, detection and response, and compliance as needed, helping the team move fast while staying secure.