Lead Security Engineer: DevSecOps & Cloud Security

Worky; Redwood City (CA); On-site; USD 180,000 - 350,000; Full time

Job summary

8090 is seeking its first Lead Security Engineer to own application security, cloud posture, and compliance for the Software Factory and 8090 Enterprise. You will report to the CEO and work closely with the CTO and engineering teams, delivering secure, compliant software for large regulated customers.

This is a hands-on role in a fast-paced environment. You will be based in Redwood City, CA, working on-site five days a week, collaborating with sales and delivery teams to address customer

Qualifications

• 7–10 years in IT/DevOps or security roles with responsibility for security and compliance.
• Has led security and compliance functions at a startup (Series A–C).
• Hands-on engineer who builds web apps and security tooling; writes scripts and pipelines.
• Experience with SOC 2, GDPR, HIPAA, FedRAMP controls and audits.
• Experience working in regulated industries (healthcare, financial services, GovTech).

Responsibilities

• Own the secure SDLC for the Software Factory and 8090 Enterprise apps with gates in CI/CD pipelines.
• Lead internal and third‑party penetration testing; direct bounty programs and disclosures.
• Own production security: IAM, encryption, network segmentation, logging, and IAM guardrails in AWS/GCP/Azure.
• Architect security across authentication, tenant isolation, data handling, and AI tool controls.
• Manage SOC 1/2, GDPR, HIPAA, FedRAMP compliance programs and audit readiness.
• Support sales with security reviews, questionnaires, and trust center materials.
• Develop AI-powered security automations and DevSecOps pipelines.
• Oversee incident response with MDR partner and run tabletop exercises.
• Manage vendor security reviews and AI supply chain risk; maintain asset inventory.
• Partner with IT on identity, zero-trust, and access reviews; set roadmap and budget.

Skills

Security leadership

DevSecOps

Penetration testing

Cloud security (AWS/GCP/Azure)

SOC 2 / HIPAA / GDPR

Compliance management

Vulnerability management

Threat modeling

Customer engagement

Security tooling development

Tools

AWS CDK

Terraform

GitHub Actions

OSCP/CCSP/CISM

Job description

8090 is seeking its first Lead Security Engineer to own application security, cloud posture, and compliance for the Software Factory and 8090 Enterprise. You will report to the CEO and work closely with the CTO and engineering teams, delivering secure, compliant software for large regulated customers.

This is a hands-on role in a fast-paced environment. You will be based in Redwood City, CA, working on-site five days a week, collaborating with sales and delivery teams to address customer