Staff Security Engineer for AI Platform, SOC 2 & Cloud

Flow Engineering; San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Health, dental, vision

Flexible time off

Meaningful equity

Job summary

Flow Engineering is seeking a Staff Software Engineer focused on security to own and advance the security architecture of our AI-native platform. You will lead hardening across the stack, drive SOC 2 readiness, and shape how we secure AI and agentic workflows in collaboration with product and sales teams.

The role demands extensive production security experience, startup leadership, and the ability to set the security agenda in a fast-paced environment.

Qualifications

• 8+ years building production software
• Deep experience in application and cloud security (AWS, GCP, or Azure)
• Experience owning security in regulated/high-trust environments; SOC 2 ownership a plus
• Threat modeling, secure architecture, incident response
• Security of AI/LLM systems
• Comfort leading security at a startup and setting the agenda

Responsibilities

• Own security architecture across the platform including threat modeling and secure design reviews
• Harden full stack: identity, network, secrets, data protection and tenant isolation
• Drive SOC 2 readiness and prepare for export control/ITAR
• Secure AI and agentic systems: prompt injection and data leakage controls
• Build security tooling for detection, monitoring, vulnerability management, and CI/CD
• Stand up and run incident response from detection to postmortems
• Collaborate with sales and product to navigate security reviews and win customers

Skills

Cloud security

Threat modeling

Incident response

Security architecture

SOC 2

AI/LLM security

Startup leadership

Tools

TypeScript/Node.js

Python

PostgreSQL

AWS/GCP/Azure

CI/CD

Job description

Flow Engineering is seeking a Staff Software Engineer focused on security to own and advance the security architecture of our AI-native platform. You will lead hardening across the stack, drive SOC 2 readiness, and shape how we secure AI and agentic workflows in collaboration with product and sales teams.

The role demands extensive production security experience, startup leadership, and the ability to set the security agenda in a fast-paced environment.