Lead Founding Security Engineer for AI Scale-Up

Franklin Fitch; New York (NY); On-site; USD 150,000 - 210,000; Full time

Job summary

Franklin Fitch is hiring its first dedicated security engineer to build the function from the ground up in New York. You’ll own both application and cloud security, shaping the program end-to-end as the team expands.

You’ll partner with engineering to implement secure-by-default practices, automate tooling, and participate in security reviews with enterprise customers. This hands-on role offers influence over the roadmap and growth trajectory.

Qualifications

• Hands-on security engineering spanning application and cloud, with real depth in at least one area.
• Strong software engineering fundamentals; you write and review production code.
• Experience building security tooling and automation, not just vendor ops.
• Working knowledge of cloud environments, containerized workloads and IaC.
• Judgment to balance risk and avoid excessive compliance theatre.

Responsibilities

• Own application security across the product: threat modelling, secure design reviews, secure code review.
• Own cloud and infrastructure security: IAM, least privilege, network segmentation, secrets management.
• Develop security tooling in CI/CD: SAST, SCA, dependency and secrets scanning.
• Lead vulnerability management from discovery to remediation and verification.
• Define the security roadmap and prioritise work with the business and engineering.
• Partner with engineering on secure-by-default patterns and customer security reviews.

Skills

Security engineering

Software engineering

DevSecOps tooling

Cloud security

IAM & least privilege

Container security

Tools

SAST

SCA

Terraform

Kubernetes security tooling

Job description

Franklin Fitch is hiring its first dedicated security engineer to build the function from the ground up in New York. You’ll own both application and cloud security, shaping the program end-to-end as the team expands.

You’ll partner with engineering to implement secure-by-default practices, automate tooling, and participate in security reviews with enterprise customers. This hands-on role offers influence over the roadmap and growth trajectory.