Lead Engineer

Black Pen Recruitment

Cape Town

On-site

ZAR 1,000,000 - 2,000,000

Full time

14 days+
Application generator

A complete application in a minute — tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

Black Pen Recruitment is seeking a Lead Engineer (Cyber security) in Cape Town to own and scale a cutting-edge AI security platform. This founding-level technical leadership role offers equity participation and significant ownership as the platform is hardened for scale and accelerated go-to-market execution.

You will work closely with the founder in a high-ownership, hands-on environment. Ideal candidates have 8+ years of software engineering experience, strong Python/TypeScript/Node.js,

Qualifications

  • 8+ years of software engineering experience.
  • Strong TypeScript, Node.js and Python experience.
  • Solid PostgreSQL knowledge with complex database interactions.
  • Experience with authentication, OAuth, API integrations and secure systems.
  • Strong cloud experience, with Google Cloud Platform (GCP) desirable.
  • Ownership of production codebase and pragmatic decisions.
  • Startup-mindset and ability to work independently with the founder.

Responsibilities

  • Own and maintain the production codebase with founder oversight.
  • Hardening, scaling and extending the platform.
  • Collaborate across teams to drive architecture and implementation decisions.

Skills

Python
TypeScript
Node.js
PostgreSQL
OAuth
REST API
Gunicorn

Tools

Flask
Jinja2
Express
React
Drizzle ORM
PostgreSQL
Docker
Terraform

Job description

Lead Engineer (Cyber security)

Our client is an AI security platform that acts as a security gateway between AI agents and databases. As companies increasingly allow AI agents to interact directly with systems and data, our client helps prevent sensitive data exposure, destructive queries, compliance violations and operational mistakes. The platform inspects and controls database interactions in real time through policy enforcement, threat detection and comprehensive audit logging. The product is already built and operational, and the business is now entering its next phase of platform hardening, product acceleration and go-to-market execution.

Role Overview

This is a founding-level technical leadership role with significant ownership and equity participation. The Lead Engineer will take ownership of the production codebase, work closely with the founder and play a key role in hardening, scaling and extending the platform.

Overall Candidate Profile

Our client is looking for high-calibre, self-starting individuals who can operate with full ownership in a founder-led, early-stage environment. The successful candidates should be motivated, pragmatic, ambitious and comfortable working closely with the founder during an intensive build-and-launch phase.

  • Strong ownership mentality with the ability to work independently without constant direction.
  • High integrity, sound judgement and a practical problem-solving approach.
  • Comfortable in a lean startup environment where priorities can move quickly.
  • Able to contribute strategically while also remaining hands-on and execution focused.
  • Preference for a small number of exceptional, carefully vetted candidates over a high-volume shortlist.
Job Type

Full Time/Independent Contractor

Location

Cape Town

Work Place

Onsite

Requirements
  • 8+ years of software engineering experience.
  • Strong TypeScript, Node.js and Python experience.
  • Solid PostgreSQL knowledge, including the ability to work with complex database interactions.
  • Experience with authentication, OAuth, API integrations and secure systems.
  • Strong cloud experience, with Google Cloud Platform (GCP) highly desirable.
  • Comfortable taking ownership of a production codebase and making pragmatic technical decisions.
  • Startup-minded, self-motivated and able to work independently alongside the founder.
Bonus Experience
  • Cybersecurity experience.
  • Fintech or payments experience.
  • Database internals, performance optimisation or secure data access expertise.
Tech Stack

Two web apps that work together: a Python/Flask marketing & database-protection site, and a React + TypeScript AI Gateway portal, both backed by PostgreSQL. The ideal hire moves comfortably between Python and TypeScript - someone strong in only one half will struggle.

The Three Services
Landing & DB Protection
  • Python / Flask
  • Landing pages, pricing, registration, billing checkout, database-protection login & dashboard.
  • Jinja2 templates, session auth, bcrypt / TOTP.
AI Gateway Portal
  • Node.js / Express + React
  • Manage AI agents, security policies, queries, anomalies, and database connections.
DB Protection Portal
  • Node.js / Express + React
  • WORM backup management, restore approvals, ransomware protection, audit logs.
Must-Have Skills
Backend - Python / Flask
  • Flask web framework
  • Jinja2 server-side templates
  • Session auth, bcrypt, TOTP / 2FA
  • REST API design
  • Gunicorn (production WSGI server)
Backend - Node.js / TypeScript
  • Express web server
  • TypeScript throughout
  • Drizzle ORM for database access
  • Session handling & auth
  • REST API design
Frontend - React
  • React 18 + TypeScript
  • Vite build tool
  • Tailwind CSS + shadcn/ui
  • wouter client-side routing
Database - PostgreSQL
  • PostgreSQL (AWS RDS in production)
  • Schema design & migrations
  • Drizzle ORM
  • Indexing & query performance
Good to Have
AWS Infrastructure
  • ECS Fargate
  • ECR
  • ALB
  • Route53
  • ACM
  • CodeBuild
  • Secrets Manager
  • CloudWatch
  • CloudTrail
  • GuardDuty
Payments & Integrations
  • Paddle (merchant of record)
  • OAuth flows (Gmail, Slack, GitHub, Salesforce)
  • Resend (email)
DevOps
  • Docker & Dockerfiles
  • Terraform (20 infrastructure modules)
  • CodeBuild CI/CD pipelines
Security Mindset
  • Rate limiting
  • Injection prevention
  • Audit logging
  • Reverse proxying between services
Nice to Have
AWS Infrastructure (Production)
  • ECS Fargate
  • ECR
  • ALB
  • Route53
  • ACM
  • RDS (PostgreSQL)
  • CodeBuild
  • AWS Backup
  • Secrets Manager
  • GuardDuty
  • CloudWatch
  • CloudTrail
Get your free, confidential resume review.
or drag and drop your file here.
Similar jobs

Similar jobs worth comparing

Lead Engineer (Cyber security)
Lead Engineer (Cyber security)

Black Pen Recruitment • Cape Town

On-site
ZAR 900,000 - 1,200,000
Platform Engineer (AWS, GitHub Actions, Heroku CI) (JHB)
Platform Engineer (AWS, GitHub Actions, Heroku CI) (JHB)

Datafin • Johannesburg

On-site
ZAR 600,000 - 800,000
Lead DevSecOps Engineer
Lead DevSecOps Engineer

ATS Client • Cape Town

On-site
ZAR 1,100,000 - 1,900,000
Competitive salary
30 days annual leave + 3 mental health
Medical aid contribution up to R2,000
+4
Head Developer (On-Site) - 64637045320
Head Developer (On-Site) - 64637045320

Somewhere • Cape Town

On-site
ZAR 911,000 - 1,366,000
Head Developer - 21279
Head Developer - 21279

somewhere • Cape Town

On-site
ZAR 1,200,000 - 1,500,000
Lead Software Engineer | Johannesburg | Permanent
Lead Software Engineer | Johannesburg | Permanent

Edgexec (Pty) Ltd • Johannesburg

On-site
ZAR 1,200,000 - 1,800,000
Growth / Technical Marketing Lead (Cyber security)
Growth / Technical Marketing Lead (Cyber security)

Black Pen Recruitment • Cape Town

On-site
ZAR 600,000 - 900,000
Senior Full Stack Engineer
Senior Full Stack Engineer

TMA Proactive Partners • Cape Town

Remote
ZAR 900,000 - 1,300,000
AI / Security Specialist (Cyber security)
AI / Security Specialist (Cyber security)

Black Pen Recruitment • Cape Town

On-site
ZAR 600,000 - 800,000
AI Platform Engineer
AI Platform Engineer

ATS Client • Cape Town

On-site
ZAR 900,000 - 1,200,000