Remote Lead Security Engineer: Cloud, IR & Compliance

Pipe; United States; Remote; USD 150,000 - 220,000; Full time

Benefits offered by this job

Equipment

Flexible vacation

Health insurance

Parental leave

Culture of excellence

Job summary

Pipe is a remote-first security-focused company hiring a core member of the security team. You will contribute to Cloud Security, Application Security, Detection & Response, and Privacy while collaborating with every team to maintain secure standards.

You will own on-call rotations, drive security policy, manage SOC 2 compliance, and lead response efforts to security questionnaires and incidents. Expect strong ownership and cross-functional collaboration in a fully remote environment.

Qualifications

• Hands-on experience with cloud platforms (GCP preferred) and Kubernetes security.
• Proficiency in Go, Python, or TypeScript to build internal tooling.
• Experience owning SOC 2 compliance programs end-to-end, including auditor management.
• Experience running incident response, on-call, post-mortems, and tabletop exercises.
• Experience managing vendor risk reviews and responding to customer security questionnaires.
• Strong written communication to interface with auditors, customers, partners, and engineers.

Responsibilities

• Review and design robust security standards and monitoring.
• Maintain and improve policy-as-code platform for rapid detection and response.
• Collaborate with Infrastructure to ensure cloud deployments adhere to policies.
• Manage SOC 2 audits and ensure compliance across processes.
• Participate in on-call rotations to support critical security issues.
• Own vulnerability disclosure program and triage inbound reports to security contact.
• Conduct tabletop exercises and incident response drills.
• Maintain security policies and lead recurring reviews (firewall changes, security reviews).
• Lead responses to partner and customer security questionnaires.
• Maintain security risk register, track remediation, and produce leadership metrics.

Skills

Cloud security

Go/Python/TypeScript

SOC 2 compliance

Incident response

Vendor risk management

Written communication

Tools

Kubernetes security

GCP

TypeScript

Go

Python

Job description

Pipe is a remote-first security-focused company hiring a core member of the security team. You will contribute to Cloud Security, Application Security, Detection & Response, and Privacy while collaborating with every team to maintain secure standards.

You will own on-call rotations, drive security policy, manage SOC 2 compliance, and lead response efforts to security questionnaires and incidents. Expect strong ownership and cross-functional collaboration in a fully remote environment.