Security Engineer (CISO Path) – Fully Remote

Tangible; United States; Remote; GBP 110,000 - 150,000; Full time

Benefits offered by this job

Ownership and growth path

Path to CISO

Fully remote with flexible hours

Direct access to leadership

Competitive pay + equity + learning

Job summary

Tangible is seeking its first dedicated information security hire. The role is fully remote (CET time preferred) and reports to the CTO.

It is hands‑on security in AWS, IaC, detection and response, and audits, with potential to grow into a CISO as the company scales. You will own SOC 2 and regulatory alignment for financial sector customers, build secure pipelines, automate evidence collection, and guide vendor reviews.

Qualifications

• 5+ years in security engineering or security-heavy infra work.
• Depth in AWS security (IAM, logging, encryption, detection).
• SOC 2 ownership and audit experience preferred.
• Experience with privacy legislation and regulated customers.

Responsibilities

• Own security in AWS environment: IAM, least privilege, segmentation, encryption, logging, detection.
• Integrate security into the development pipeline: secrets, scanning, threat modeling.
• Automate controls and evidence collection; build IaC guardrails.
• Lead vulnerability management and incident response; write runbooks.
• Define data-use rules for AI/LLM; assess prompt risks and logging.
• Own SOC 2 controls and auditor relationships.
• Handle regulatory privacy duties (GDPR/CCPA, other regions).
• Lead customer security reviews and vendor risk assessments.
• Build security awareness and drive phishing resilience; plan strategy and budget.

Skills

SOC 2 experience

Auditing experience

Written communication

Leadership ambition

Tools

Python

Terraform

Job description

Tangible is seeking its first dedicated information security hire. The role is fully remote (CET time preferred) and reports to the CTO.

It is hands‑on security in AWS, IaC, detection and response, and audits, with potential to grow into a CISO as the company scales. You will own SOC 2 and regulatory alignment for financial sector customers, build secure pipelines, automate evidence collection, and guide vendor reviews.