Staff Security Architect for AI-Driven Platform

PVH (Tommy Hilfiger/Calvin Klein); San Francisco (CA); On-site; USD 210,000 - 260,000; Full time

Benefits offered by this job

Equity

Health, dental, and vision coverage

Flexible time off

Job summary

Flow Engineering is seeking a Staff Software Engineer to own security across a modern AI‑native platform used by defense and aerospace customers. You will define the security architecture, harden the platform, and drive the compliance posture, especially for AI and agentic workflows.

You will own threat modeling, secure design reviews, and the standards we build against, ensuring data protection and tenant isolation. This is a hands‑on leadership role at a startup with significant impact.

Qualifications

• 8+ years building production software with secure services at scale in the cloud.
• Experience owning security in regulated/high-trust environments and implementing SOC2.
• Experience securing AI/LLM systems and guarding against prompt injection/exfiltration.

Responsibilities

• Own security architecture across the platform, including threat modeling and secure design reviews.
• Harden the stack—from application security to cloud infrastructure, including identity, network, and data protection.
• Drive SOC2 readiness and other certifications (e.g., export control/ITAR) for defense/aerospace customers.
• Secure AI and agentic systems: guardrails, data protection, and restricting model actions.
• Build security tooling for detection, monitoring, vulnerability management, and CI/CD.
• Stand up and run incident response from detection to post-mortems.
• Collaborate with sales and product to navigate security reviews and win customer trust.

Skills

Security architecture

Threat modeling

Incident response

Cloud security

AI security

Tools

AWS

GCP

Azure

PostgreSQL

Job description

Flow Engineering is seeking a Staff Software Engineer to own security across a modern AI‑native platform used by defense and aerospace customers. You will define the security architecture, harden the platform, and drive the compliance posture, especially for AI and agentic workflows.

You will own threat modeling, secure design reviews, and the standards we build against, ensuring data protection and tenant isolation. This is a hands‑on leadership role at a startup with significant impact.