Security Engineer (Senior/Lead) - MeshMesh

Momentum; San Francisco (CA); On-site; USD 140,000 - 210,000; Full time

Job summary

Leadout Capital in San Francisco is looking for a Security Engineer to embed security into all layers of our platform, from infrastructure to application code. You will conduct threat modeling, build tooling for vulnerability scanning, partner with engineering to remediate issues, and support audits as the platform scales.

A 4–8 year track record in security engineering is required. Experience with cloud services (AWS, GCP, Azure), distributed systems, and AI-security workflows with agent loops

Qualifications

• 4–8 years of experience in security engineering.
• Experience in application or infrastructure security engineering.
• Experience with public cloud services (AWS, GCP, or Azure).
• 2+ years of deep understanding of object oriented programming and experience with at least one OO language (Java, Go, Python, C++, C#).
• Experience building large scale distributed systems, especially in cloud environments.
• Familiar with common security frameworks and threat modeling practices.
• Experience with vulnerability scanning and remediation tooling.
• Experience with AI-assisted development workflows built with Claude and similar tools.

Responsibilities

• Conduct security reviews and threat modeling for new features and systems.
• Build and maintain security tooling, including vulnerability scanning and monitoring.
• Partner with engineering teams to remediate vulnerabilities and harden systems.
• Support compliance and audit efforts as the platform scales.
• Own day-to-day security engineering execution, driving vulnerability remediation and continuous control validation.

Skills

Security engineering

Threat modeling

Vulnerability remediation

Cloud security

Distributed systems in cloud

Education

Related technical degree or experience

Tools

Docker

Kubernetes

Vulnerability scanning tooling

AI security workflows (Claude, agent loops)

Job description

The Experience

The MeshMesh Security Engineer safeguards the platform and its customers by building security into every layer of the system, from infrastructure to application code.

What You'll Actually Be Doing

• Conduct security reviews and threat modeling for new features and systems.
• Build and maintain security tooling, including vulnerability scanning and monitoring.
• Partner with engineering teams to remediate vulnerabilities and harden systems.
• Support compliance and audit efforts as the platform scales.
• Own day-to-day security engineering execution, driving vulnerability remediation, security improvements, and continuous control validation.

You're Our Person If...

• You have 4-8 years of experience.
• You have experience in application or infrastructure security engineering.
• Experience with public cloud services (AWS, Google Cloud Platform, or Azure)
• 2+ years of deep understanding of object oriented programming and experience with at least one object oriented programming language (Java, Go, Python C++, C#)
• You have experience building large scale distributed systems, especially in cloud environments
• You are familiar with common security frameworks and threat modeling practices.
• You have experience with vulnerability scanning and remediation tooling.
• You are an Agentic Engineer - you understand how to secure and review AI-assisted development workflows built with Claude and similar tools, including agent loops and tool use.
• You have a related technical degree or experience

Even Better If...

• You hold a relevant security certification (e.g. CISSP, OSCP).
• You have experience securing networking or IoT platforms.
• You have knowledge working with relational database MySQL, Postgres
• You are familiar with open source technologies, such as ZooKeeper, MongoDB
• You have experience building services with Docker and Kubernetes
• You have good knowledge with network technologies, such as TCP/IP, DNS or load balancer
• You are familiar with emerging AI security frameworks, such as OWASP LLM/Agentic Top 10 and MITRE ATLAS.
• You have understanding of emerging security challenges and controls within AI-assisted and agentic software development lifecycles.