Security Engineer

Confido; New York (NY); On-site; USD 140,000 - 200,000; Full time

Benefits offered by this job

Equity

Health coverage (fully paid)

Dental & Vision coverage

Fertility and family-forming support

Parental leave

Unlimited PTO

Job summary

Confido, the AI operating system for cash applications and trade planning in CPG brands, is hiring its first Security Engineer in NYC. You will own the security roadmap, build core security primitives, and enable proactive threat detection and response across cloud, apps, and vendors.

You’ll work closely with DevOps and product engineers to push secure, compliant systems, balancing risk with shipping speed in a fast-growing environment.

Qualifications

• 5+ years building software or production infrastructure.
• 3+ years hands-on security in AWS with infrastructure as code.
• Understanding of IAM, networking, Kubernetes, and secrets management.
• Ability to write and review code in Python, Ruby, TypeScript, or similar.
• Strong ownership: drive projects from inception to production.

Responsibilities

• Define and drive the security roadmap for Confido's product and ecosystem.
• Build key security primitives enabling fast, safe shipping.
• Develop systems for proactive security management and monitoring.
• Lead remediation of prioritized security issues.
• Partner with engineering to deploy secure, scalable systems.

Skills

5+ years

AWS security

IAM & Kubernetes

Programming: Python/Ruby/TypeScript

Ownership

Risk assessment

Communication

Tools

AWS

Kubernetes

Terraform

PostgreSQL

Python

Ruby on Rails

TypeScript

Docker

GitHub Actions

Job description

The brands on your kitchen shelf are run by people doing extraordinary work that nobody sees.

We're building the platform they run on, and a brand they'll be proud to be part of.

Confido is the AI operating system that runs cash application, deductions, trade and planning in one place for CPG brands. That means Finance, Sales, and Ops finally work on the same number.

We’re trusted by 250+ brands managing $30B+ in revenue, including Daisy, OLIPOP, Simple Mills, Idahoan, and more. We've achieved best-in-class growth and recently raised a $55M Series B led by Insight Partners to accelerate our momentum.

If you want your work on shelves everywhere — and outsized ownership while you build — we'd love to meet you.

The Role

Every day, Confido processes remittances, deductions, retailer disputes, and trade spend for some of the fastest-growing brands in CPG. Our customers trust us with their bank data, ERP credentials, and retailer portal logins. We're hiring our first Security Engineer to make Confido the most trusted place for CPG brands to run their financial operations.

Your work will center on three areas:

• Confido builds products with an eye for security — secure defaults in our infrastructure, CI/CD, and application code, so the safe path is the easy one.
• Confido detects and responds to threats before they cause harm — visibility into what's happening across our cloud, apps, and vendors, and a clear plan when something goes wrong.
• Security powers Confido's growth — a security and compliance program that helps us win and keep enterprise customers instead of slowing deals down.

This is a hands-on role. You'll work closely with our DevOps and product engineers and with engineering leadership. We expect you to form your own opinions about where our security program needs to go and then make it happen.

What You'll Do

• Take stock of Confido’s product and ecosystem to drive the security roadmap
• Build key security primitives that enable the engineering team to ship quickly and safely
• Build the systems to enable proactivity in security management
• Lead remediation of prioritized issues
• Partner with the engineering team to deploy secure systems

What We're Looking For

• 5+ years of experience building software or production infrastructure
• 3+ years of hands-on security work in AWS, with infrastructure as code (Terraform or similar)
• A working understanding of IAM, networking, Kubernetes, and secrets management
• Ability to write and review code in Python, Ruby, TypeScript, or another language
• A strong sense of ownership: you drive projects from inception through scaling them in production
• The judgment to weigh real risk against shipping speed, and to explain that tradeoff clearly
• Clear, concise written and verbal communication
• Desire to work in a fast-paced environment, continuously grow, and master your craft

Nice to Have

• Experience leading or supporting a SOC 2 or similar compliance program
• Experience with systems that handle financial, payments, or other sensitive data
• Application security experience with Ruby on Rails or React
• Experience improving the developer experience and security properties of a multi-service deployment
• Experience at an early-stage, high-growth B2B SaaS company

Our Stack

We care much more about strong fundamentals than experience with any particular tool, but today we primarily use AWS, Kubernetes, Docker, Terraform, PostgreSQL, Python, Ruby on Rails, TypeScript, OpenTelemetry, Grafana/Prometheus, and GitHub Actions.

Perks + Benefits

• Equity — own a meaningful piece of the company you’re helping build
• Fully paid health coverage through Aetna — we cover 100% of employee premiums
• Top-tier dental and vision coverage through Guardian
• Carrot Fertility Pro — comprehensive fertility and family-forming support
• 12 weeks of paid parental leave
• Unlimited PTO — plus regular 4-day holiday weekends we actually take
• 401(k) through Vestwell
• Paid relocation support — we’ll help you make the move to NYC
• Fully equipped workspace from day one — laptop, monitor, keyboard, and a $200 stipend to personalize your setup
• Team perks — catered Friday lunches, team dinners, and unlimited coffee + snacks featuring products from the brands we work with

Confido provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.