Staff Security Engineer - AI/Cloud, SOC2 & Compliance

Flow Engineering, Inc.; San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Competitive salary

Meaningful equity

Job summary

Flow Engineering, Inc. is seeking a Staff Software Engineer focused on security for its AI-native requirements platform in San Francisco.

You will own security architecture, harden the platform, and shape the compliance posture while leading how we secure AI and agentic workflows. You will drive threat modeling, incident response, and security tooling across the stack, collaborating with product and sales to pass reviews and win customers.

Qualifications

• 8+ years building production software with secure services at scale.
• Deep experience in application and cloud security (AWS, GCP, Azure) including IAM, secrets, network security, and data protection.
• Prior SOC 2 ownership and exposure to export control/ITAR or FedRAMP is a big plus.
• Strong in threat modeling, secure architecture, and incident response.
• Experience securing AI or LLM systems.
• Comfortable leading security in a startup and setting the agenda independently.

Responsibilities

• Own security architecture across the platform: threat modeling, secure design reviews, and the standards we build against.
• Harden the full stack, from application security to cloud infrastructure (identity, network, secrets), tenant isolation, and data protection.
• Drive SOC 2 readiness and get us ready for certifications defense and aerospace customers require, including export control and ITAR.
• Secure our AI and agentic systems: prompt injection, data leakage through models, what actions agents are allowed to take, and guardrails.
• Build security tooling across detection, monitoring, vulnerability management, and CI/CD.
• Stand up incident response and run it, from detection through postmortems.
• Work with sales and product to get through security reviews and win customer confidence.

Skills

Security architecture

Threat modeling

Secure design reviews

Cloud security (AWS/GCP/Azure)

Incident response

Export control ITAR

AI/LLM security

Startup security leadership

Tools

AWS

GCP

Azure

Postgres

Job description

Flow Engineering, Inc. is seeking a Staff Software Engineer focused on security for its AI-native requirements platform in San Francisco.

You will own security architecture, harden the platform, and shape the compliance posture while leading how we secure AI and agentic workflows. You will drive threat modeling, incident response, and security tooling across the stack, collaborating with product and sales to pass reviews and win customers.