Senior Software Engineer, Security & Data Integrity

Vantage 42 Inc.; New York (NY); Remote; USD 185,000 - 235,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

Flexible PTO

Fully remote with overlap to US EST

Job summary

Vantage42, a seed-stage, fully remote company headquartered in New York, seeks a Senior Software Engineer focused on security and data integrity. You will own critical engineering controls around secure execution, per-client isolation, source provenance and release processes, collaborating with the CTO and security leadership.

You will strengthen data pipelines, audit trails and incident response, contributing to SOC 2 readiness and ensuring trustworthy AI-enabled applications across customer

Qualifications

• 6+ years in production software engineering with security-focused work.
• Strong TS/Node.js and/or Python skills with SQL experience.
• Practical expertise in IAM and cryptography, secure SDLC and threat modeling.

Responsibilities

• Harden isolation, authentication, authorization, secrets, encryption and audit trails for sensitive documents.
• Design safeguards for AI and tool execution, prompt-injection defenses and safe human approval gates.
• Threat-model cross-component risks including vendor/model dependencies and isolated customer instances.
• Strengthen data ingestion, validation, lineage, and integrity from source to analysis.
• Improve secure code review, vulnerability management and disaster-recovery evidence.
• Assist with SOC 2 readiness and client-delivered security questionnaires.

Skills

TypeScript/Node.js

Python

SQL & data pipelines

IAM & authorization

Cryptography & secrets

Secure SDLC

Threat modeling

Incident response

Cloud security

Job description

Senior Software Engineer, Security & Data Integrity

Employment type Full-time employee Department Engineering Work location Remote Compensation $185,000 – $235,000 annually
Final compensation will depend on the location and level at which the candidate is hired

About this job

ABOUT VANTAGE42

Vantage42 builds AI-native intelligence software for institutional capital. Our flagship platform turns the documents, data and workflows of venture capital, private equity, LPs and family offices into a continuously updated, source-traceable view of their portfolios.

Underneath the product is a proprietary, stateful agent architecture: specialist analysis coordinated through shared, evidence-backed memory; deterministic financial calculations; and human review at consequential decision points. Each customer runs on a separate application copy and database. We are focused on institutional finance today while building technical foundations that could extend to other institutional domains over time.

We are a seed-stage, fully remote team headquartered in New York, led by fourth-time founder Ben Wald. We pair ambitious engineering with a white-glove, hospitality-first approach to customers.

THE ROLE

Institutional investors entrust Vantage42 with sensitive records: fund statements, cap tables, capital accounts, side letters, K-1s and investment judgments. We need a hands-on engineer who can build software and reason deeply about how evidence, agent actions and customer data remain protected and trustworthy.

Working closely with our CTO and security leadership, you'll own critical engineering controls across secure execution, per-client application-and-data isolation, source provenance and the release process. You'll also help strengthen our security assurance and SOC 2 readiness. This is a builder's role, not a compliance-only role or a generic cloud-security position.

WHAT YOU'LL DO

Engineer trust into the architecture

Harden customer isolation, authentication and authorization, secrets, encryption, audit trails and access to sensitive documents and derived agent outputs.

Design safeguards for AI and tool execution: prompt-injection defenses, untrusted-document handling, least-privilege tool access, data-exfiltration prevention and safe human approval gates.

Threat-model cross-component risks including vendor/model dependencies, service-to-service calls, background agent execution and release propagation across isolated customer instances.

Make financial and agent data verifiable

Strengthen ingestion and validation pipelines so financial records remain complete, consistent and traceable from source document to typed claim to downstream analysis.

Build tests, monitors and controls for data lineage, temporal updates, corrections, stale dependencies and integrity of shared agent memory.

Partner with product engineers on robust data schemas, incident-resistant workflows and reproducible investigation of errors and disputed findings.

Build operational security and deployment discipline

Improve secure code review, vulnerability management, dependency scanning, production logging, alerting, incident response and disaster-recovery evidence.

Help maintain controlled rollout and rollback of releases to separately provisioned customer environments, with testable isolation and patch propagation.

Support security questionnaires, enterprise diligence, control evidence, SOC 2 readiness and independent validation without overstating current certifications or hosting options.

Contribute to portability and client-controlled deployment design as a future architecture objective, while securing the managed environment we operate today.

WHAT SUCCESS LOOKS LIKE

First 30 days:

Ship a meaningful security or data-integrity fix and produce a prioritized threat model covering agent execution, source data and client isolation.

By 90 days:

Close major identified gaps; instrument core data-lineage and security controls, with clear evidence suitable for internal review and customer diligence.

By 6 months:

Own measurable improvements in secure agent execution, isolation testing, release safety and reliable traceability of consequential financial records.

WHAT YOU BRING

6+ years in production software engineering, including 3+ years of hands-on application, product or cloud security engineering.

Strong TypeScript/Node.js and/or Python skills; excellent SQL, relational modeling and production data-pipeline experience.

Practical expertise in IAM, authorization, cryptography and secrets, secure SDLC, OWASP risks, threat modeling and incident response.

Experience securing managed cloud or SaaS systems with audit logs, monitoring and vulnerability controls; ability to reason across third-party dependencies.

Ability to implement security improvements in code, not just write policies; an understanding of data provenance and reliability in AI-enabled applications.

Clear judgment, collaborative communication and a product mindset in a fast-moving engineering organization.

NICE TO HAVE

Sensitive financial data, fintech, regulated enterprise software, SOC 2 or ISO 27001 audit readiness.

AI/agent security, prompt injection, retrieval poisoning, temporal databases, provenance graphs or event-driven processing.

Security certifications such as CISSP, OSCP or AWS Security Specialty (not required).

WHAT WE OFFER

Compensation:

Base salary $185,000–$235,000

Working model:

Full-time, fully remote with meaningful overlap with US Eastern hours; headquarters in New York.

Benefits:

Health, dental, and vision insurance; flexible PTO; a small team where your work shapes the product and company.

Vantage is an equal opportunity employer. We do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, veteran status, genetic information, or any other characteristic protected by applicable federal, state, or local law. All employment decisions are based on qualifications, merit, and business need.