Senior Security Engineer

Wintermeyer Ventures; San Francisco (CA); On-site; USD 200,000 - 330,000; Full time

Benefits offered by this job

Equity

Job summary

Wintermeyer Ventures in San Francisco, CA seeks a senior individual contributor to own application security for a rapidly scaling, multi-tenant AI platform serving enterprise customers. You will embed secure practices across the entire software development lifecycle, protecting data at scale.

You will partner with product engineering to integrate security from design to deployment, build tooling, and drive vulnerability remediation. This is an on-site role with substantial equity and high impact.

Qualifications

• 4+ years in software engineering and hands-on application/infrastructure security.
• Experience with GCP or AWS cloud security.
• Familiar with security tooling across the stack (SAST/DAST/IAST, container security, Semgrep, CodeQL).
• Strong Python and cloud-native infrastructure (Kubernetes, CI/CD).
• Background as founding security engineer at VC-backed company is a plus.

Responsibilities

• Design and implement application security controls across a multi-tenant AI platform, including secure coding practices, threat modeling, and vulnerability management.
• Partner closely with product engineering teams to integrate security from design through deployment.
• Build security tooling and automation that helps developers ship quickly while identifying and remediating vulnerabilities fast.
• Lead security code reviews and architecture assessments for new features, with a focus on AI model integration points and customer data handling.
• Respond to security incidents involving application vulnerabilities and drive post-incident improvements.

Skills

Application security

Software engineering

Cloud security

SAST/DAST/IAST

Tools

Semgrep

CodeQL

Kubernetes

CI/CD

Job description

About the Role

This is a senior individual contributor role owning application security for a rapidly scaling, multi-tenant AI agent platform that serves enterprise customers. You will sit at the intersection of product engineering and security, embedding secure practices across the full software development lifecycle. The work directly protects sensitive customer data at scale and shapes how a fast-growing AI company builds security culture from the ground up.

What You'll Do

• Design and implement application security controls across a multi-tenant AI platform, including secure coding practices, threat modeling, and vulnerability management.
• Partner closely with product engineering teams to integrate security from design through deployment.
• Build security tooling and automation that helps developers ship quickly while identifying and remediating vulnerabilities fast.
• Lead security code reviews and architecture assessments for new features, with a focus on AI model integration points and customer data handling.
• Respond to security incidents involving application vulnerabilities and drive post-incident improvements.

What We're Looking For

• 4+ years of combined software engineering and hands-on application or infrastructure security experience, ideally at a high-growth company or well-funded startup.
• Strong software engineering foundation, either transitioning into security or already working as an AppSec engineer in a fast-paced environment.
• Practical security engineering experience, not a pure compliance or GRC background.
• Experience with GCP or AWS cloud security.
• Familiarity with security tooling across the stack: SAST, DAST, IAST, container security, Semgrep, or CodeQL.
• Comfort working within Python-based codebases and cloud-native infrastructure (Kubernetes, CI/CD pipelines).
• Strong CS fundamentals, ideally from a rigorous undergraduate program.
• Background as an early or founding security engineer at a VC-backed company is a plus.
• Demonstrated rapid career progression or early promotion is a plus.

Compensation & Benefits

Base salary range: $200,000 to $330,000 USD annually, plus equity. Visa sponsorship is not available for this role.

Location

This role is on-site five days per week in San Francisco, CA.