Remote Security Engineer - Cloud, SDLC & Compliance Leader

Drivetrain; United States; Remote; USD 120,000 - 160,000; Full time

Job summary

Drivetrain is a financial planning and decision-making platform that helps companies scale and achieve targets predictably. Founded in 2021 by ex-Googlers, it is a remote-first, fast-growing startup backed by leading venture capital firms with a culture focused on autonomy, transparency, and customer-centricity.

As a Security Engineer you will own the security posture across product, cloud infrastructure, and internal systems, partnering with Engineering, DevOps and Compliance to bake security

Qualifications

• 4-7 years of hands-on experience in security engineering, cloud security, or application security at a B2B SaaS company.
• Strong knowledge of AWS security services and Infrastructure as Code (Terraform or similar).
• Comfort writing code (Python, Go) to automate security tasks and experience supporting SOC 2 or ISO 27001 audits.

Responsibilities

• Own Drivetrain's security posture across product, cloud infrastructure, and internal systems.
• Work closely with Engineering, DevOps, and Compliance to build security into the shipping process.
• Protect data that finance leaders at enterprise companies rely on.
• Secure cloud infrastructure (AWS) including IAM, network security, secrets management, and logging.
• Embed security into the SDLC through threat modeling, secure code reviews, and automated scanning in CI/CD.
• Lead vulnerability management, detection and incident response, and compliance programs like SOC 2 Type II and ISO 27001.

Skills

Security engineering

Cloud security

Application security

Threat modeling

Secure code reviews

CI/CD security automation

SOC 2 / ISO 27001 audits

Tools

Terraform

AWS

Job description

Drivetrain is a financial planning and decision-making platform that helps companies scale and achieve targets predictably. Founded in 2021 by ex-Googlers, it is a remote-first, fast-growing startup backed by leading venture capital firms with a culture focused on autonomy, transparency, and customer-centricity.

As a Security Engineer you will own the security posture across product, cloud infrastructure, and internal systems, partnering with Engineering, DevOps and Compliance to bake security