Security Lead & Architect for Enterprise Platform (Hybrid)

Startup Atlas; Boston (MA); Hybrid; USD 180,000 - 240,000; Full time

Job summary

Inrupt is seeking a Head of Security / Senior Security Engineer to lead and evolve our security program. You’ll drive tooling, processes, and governance to maintain ISO 27001 and SOC 2 compliance while working across engineering, product, sales, and operations.

You’ll balance hands‑on execution with strategic planning, owning security tooling, incident response, and audits. This role is Boston‑based with hybrid work two days in‑office weekly.

Qualifications

• 5–8+ years in application security, security engineering, cloud security, or similar roles.
• Hands‑on security professional with experience leading and evolving security programs.
• Strong understanding of SSDLC, DevSecOps, and secure software development practices.
• Experience implementing and managing security tooling (SAST/DAST/SCA) and cloud security controls.
• Direct experience with ISO 27001 and SOC 2 programs from implementation through audit.
• Familiarity with OWASP Top 10, SANS Top 25, and common vulnerability types.
• Excellent communication and collaboration skills across technical and non‑technical audiences.
• Experience coordinating with distributed/remote teams across multiple time zones.

Responsibilities

• Own and optimize security tooling stack for SAST, DAST, SCA, container scanning, and IaC security.
• Partner with engineering to create threat models for new features and architectural changes.
• Ensure cloud environments meet security best practices and evolving compliance requirements.
• Review security feedback on requirements, designs, and architecture decisions.
• Analyze scanning outputs to identify, prioritize, and track vulnerabilities.
• Translate findings into actionable prioritised recommendations for development teams.
• Own security incident response for products and services; lead post‑incident reviews.
• Maintain and evolve security policies, standards, and procedures as the company grows.
• Lead cross-functional risk management meetings to assess and mitigate risks.
• Support ISO 27001 and SOC 2 certifications progress toward Type II.

Skills

Application security

Security engineering

Cloud security

SSDLC

DevSecOps

Threat modeling

ISO 27001

SOC 2

OWASP Top 10

CI/CD security

Tools

SAST

DAST

SCA

Container scanning

IaC security

Job description

Inrupt is seeking a Head of Security / Senior Security Engineer to lead and evolve our security program. You’ll drive tooling, processes, and governance to maintain ISO 27001 and SOC 2 compliance while working across engineering, product, sales, and operations.

You’ll balance hands‑on execution with strategic planning, owning security tooling, incident response, and audits. This role is Boston‑based with hybrid work two days in‑office weekly.