Security Engineer

Confido Health; New York (NY); On-site; USD 180,000 - 230,000; Full time

Benefits offered by this job

Equity

Health insurance

Dental & Vision

Fertility support

Parental leave

Unlimited PTO

401(k)

Relocation to NYC

Home workspace setup

Team perks

Job summary

Confido Health is hiring its first Security Engineer to secure remittances, deductions and trade spend for leading CPG brands. You’ll drive security across AWS, CI/CD, and production deployments, building security primitives and proactive monitoring to protect customer data and enable growth.

You will work with DevOps and product engineers, shaping the security program and policies, and partnering with leadership to ensure scalable, compliant security in a fast-paced SaaS environment.

Qualifications

• 5+ years of experience building software or production infrastructure.
• 3+ years of hands-on security work in AWS, with infrastructure as code (Terraform or similar).
• A working understanding of IAM, networking, Kubernetes, and secrets management.
• Ability to write and review code in Python, Ruby, TypeScript, or another language.
• A strong sense of ownership: you drive projects from inception through scaling them in production.
• The judgment to weigh real risk against shipping speed, and to explain that tradeoff clearly.
• Clear, concise written and verbal communication.
• Desire to work in a fast-paced environment, continuously grow, and master your craft.

Responsibilities

• Take stock of Confido’s product and ecosystem to drive the security roadmap.
• Build key security primitives that enable the engineering team to ship quickly and safely.
• Build the systems to enable proactivity in security management.
• Lead remediation of prioritized issues.
• Partner with the engineering team to deploy secure systems.

Skills

Security engineering

Software development

AWS

Infrastructure as code

Kubernetes

Python

Ruby

TypeScript

Ownership mindset

Communication

Tools

AWS

Terraform

Kubernetes

Docker

PostgreSQL

Python

Ruby on Rails

TypeScript

OpenTelemetry

Grafana/Prometheus

GitHub Actions

Job description

The brands on your kitchen shelf are run by people doing extraordinary work that nobody sees.

We're building the platform they run on, and a brand they'll be proud to be part of.

Confido is the AI operating system that runs cash application, deductions, trade and planning in one place for CPG brands. That means Finance, Sales, and Ops finally work on the same number.

We’re trusted by 250+ brands managing $30B+ in revenue, including Daisy, OLIPOP, Simple Mills, Idahoan, and more. We've achieved best-in-class growth and recently raised a $55M Series B led by Insight Partners to accelerate our momentum.

If you want your work on shelves everywhere — and outsized ownership while you build — we'd love to meet you.

The Role

Every day, Confido processes remittances, deductions, retailer disputes, and trade spend for some of the fastest-growing brands in CPG. Our customers trust us with their bank data, ERP credentials, and retailer portal logins. We're hiring our first Security Engineer to make Confido the most trusted place for CPG brands to run their financial operations.

Your work will center on three areas:

• Confido builds products with an eye for security — secure defaults in our infrastructure, CI/CD, and application code, so the safe path is the easy one.

• Confido detects and responds to threats before they cause harm — visibility into what's happening across our cloud, apps, and vendors, and a clear plan when something goes wrong.

• Security powers Confido's growth — a security and compliance program that helps us win and keep enterprise customers instead of slowing deals down.

This is a hands-on role. You'll work closely with our DevOps and product engineers and with engineering leadership. We expect you to form your own opinions about where our security program needs to go and then make it happen.

What You'll Do

• Take stock of Confido’s product and ecosystem to drive the security roadmap

• Build key security primitives that enable the engineering team to ship quickly and safely

• Build the systems to enable proactivity in security management

• Lead remediation of prioritized issues

• Partner with the engineering team to deploy secure systems

What We're Looking For

• 5+ years of experience building software or production infrastructure

• 3+ years of hands-on security work in AWS, with infrastructure as code (Terraform or similar)

• A working understanding of IAM, networking, Kubernetes, and secrets management

• Ability to write and review code in Python, Ruby, TypeScript, or another language

• A strong sense of ownership: you drive projects from inception through scaling them in production

• The judgment to weigh real risk against shipping speed, and to explain that tradeoff clearly

• Clear, concise written and verbal communication

• Desire to work in a fast-paced environment, continuously grow, and master your craft

Nice to Have

• Experience leading or supporting a SOC 2 or similar compliance program

• Experience with systems that handle financial, payments, or other sensitive data

• Application security experience with Ruby on Rails or React

• Experience improving the developer experience and security properties of a multi-service deployment

• Experience at an early-stage, high-growth B2B SaaS company

Our Stack

We care much more about strong fundamentals than experience with any particular tool, but today we primarily use AWS, Kubernetes, Docker, Terraform, PostgreSQL, Python, Ruby on Rails, TypeScript, OpenTelemetry, Grafana/Prometheus, and GitHub Actions.

Perks + Benefits

• Equity — own a meaningful piece of the company you’re helping build

• Fully paid health coverage through Aetna — we cover 100% of employee premiums

• Top-tier dental and vision coverage through Guardian

• Carrot Fertility Pro — comprehensive fertility and family-forming support

• 12 weeks of paid parental leave

• Unlimited PTO — plus regular 4-day holiday weekends we actually take

• 401(k) through Vestwell

• Paid relocation support — we’ll help you make the move to NYC

• Fully equipped workspace from day one — laptop, monitor, keyboard, and a $200 stipend to personalize your setup

• Team perks — catered Friday lunches, team dinners, and unlimited coffee + snacks featuring products from the brands we work with

Confido provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.