Lead Engineer (Cyber security)

Black Pen Recruitment

Cape Town

On-site

ZAR 900,000 - 1,200,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

Black Pen Recruitment is looking for a Lead Engineer for an AI security platform in Cape Town. This pivotal role involves substantial ownership of the production codebase and collaborating closely with the founder. The ideal candidate will possess over 8 years of software engineering experience, with strong skills in TypeScript, Node.js, and Python. You’ll help enhance the product and ensure secure and compliant interactions between AI agents and databases.

The position is onsite and offers opportunities for equity participation. Join us in shaping innovative solutions in cybersecurity!

Qualifications

  • 8+ years of software engineering experience.
  • Strong TypeScript, Node.js, and Python experience.
  • Solid PostgreSQL knowledge, including working with complex database interactions.

Responsibilities

  • Take ownership of the production codebase.
  • Work closely with the founder during the build-and-launch phase.
  • Contribute strategically while remaining hands-on and execution focused.

Skills

TypeScript
Node.js
Python
PostgreSQL
Cloud Experience
Cybersecurity

Education

8+ years of software engineering experience

Tools

Flask
React
Express
Docker

Job description

Lead Engineer (Cyber security)

Our client is an AI security platform that acts as a security gateway between AI agents and databases. As companies increasingly allow AI agents to interact directly with systems and data, our client helps prevent sensitive data exposure, destructive queries, compliance violations and operational mistakes. The platform inspects and controls database interactions in real time through policy enforcement, threat detection and comprehensive audit logging. The product is already built and operational, and the business is now entering its next phase of platform hardening, product acceleration and go-to-market execution.

Role Overview

This is a founding-level technical leadership role with significant ownership and equity participation. The Lead Engineer will take ownership of the production codebase, work closely with the founder and play a key role in hardening, scaling and extending the platform.

Overall Candidate Profile

Our client is looking for high-calibre, self-starting individuals who can operate with full ownership in a founder-led, early-stage environment. The successful candidates should be motivated, pragmatic, ambitious and comfortable working closely with the founder during an intensive build-and-launch phase.

  • Strong ownership mentality with the ability to work independently without constant direction.
  • High integrity, sound judgement and a practical problem‑solving approach.
  • Comfortable in a lean startup environment where priorities can move quickly.
  • Able to contribute strategically while also remaining hands‑on and execution focused.
  • Preference for a small number of exceptional, carefully vetted candidates over a high‑volume shortlist.

Job Type: Full Time/Independent Contractor

Location: Cape Town

Work Place: Onsite

Requirements
  • 8+ years of software engineering experience.

  • Strong TypeScript, Node.js and Python experience.

  • Solid PostgreSQL knowledge, including the ability to work with complex database interactions.
  • Experience with authentication, OAuth, API integrations and secure systems.
  • Strong cloud experience, with Google Cloud Platform (GCP) highly desirable.
  • Comfortable taking ownership of a production codebase and making pragmatic technical decisions.
  • Startup‑minded, self‑motivated and able to work independently alongside the founder.
Bonus Experience
  • Cybersecurity experience.

  • Fintech or payments experience.

  • Database internals, performance optimisation or secure data access expertise.
Tech Stack

Two web apps that work together: a Python/Flask marketing & database‑protection site, and a React + TypeScript AI Gateway portal, both backed by PostgreSQL. The ideal hire moves comfortably between Python and TypeScript — someone strong in only one half will struggle.

The Three Services
Landing & DB Protection
  • Python / Flask

  • Landing pages, pricing, registration, billing checkout, database‑protection login & dashboard.
  • Jinja2 templates, session auth, bcrypt / TOTP.

AI Gateway Portal
  • Node.js / Express + React

  • Manage AI agents, security policies, queries, anomalies, and database connections.
DB Protection Portal
  • Node.js / Express + React

  • WORM backup management, restore approvals, ransomware protection, audit logs.
Must‑Have Skills
Backend — Python / Flask
  • Flask web framework

  • Jinja2 server‑side templates

  • Session auth, bcrypt, TOTP / 2FA

  • REST API design

  • Gunicorn (production WSGI server)

Backend — Node.js / TypeScript
  • Express web server

  • TypeScript throughout

  • Drizzle ORM for database access

  • Session handling & auth

  • REST API design

Frontend — React
  • React 18 + TypeScript

  • Vite build tool

  • Tailwind CSS + shadcn/ui

  • wouter client‑side routing

Database — PostgreSQL
  • PostgreSQL (AWS RDS in production)

  • Schema design & migrations

  • Drizzle ORM

  • Indexing & query performance

Good to Have
AWS Infrastructure
  • ECS Fargate

  • ECR

  • ALB

  • Route53

  • ACM

  • CodeBuild

  • Secrets Manager

  • CloudWatch

  • CloudTrail

  • GuardDuty

Payments & Integrations
  • Paddle (merchant of record)

  • OAuth flows (Gmail, Slack, GitHub, Salesforce)

  • Resend (email)

DevOps
  • Docker & Dockerfiles

  • Terraform (20 infrastructure modules)

  • CodeBuild CI/CD pipelines

Security Mindset
  • Rate limiting

  • Injection prevention

  • Audit logging

  • Reverse proxying between services

Nice to Have
AWS Infrastructure (Production)
  • ECS Fargate

  • ECR

  • ALB

  • Route53

  • ACM

  • RDS (PostgreSQL)

  • CodeBuild

  • AWS Backup

  • Secrets Manager

  • GuardDuty

  • CloudWatch

  • CloudTrail

Get your free, confidential resume review.
or drag and drop your file here.
Similar jobs

Similar jobs worth comparing

Platform Engineer (AWS, GitHub Actions, Heroku CI) (JHB)
Platform Engineer (AWS, GitHub Actions, Heroku CI) (JHB)

Datafin • Johannesburg

On-site
ZAR 600,000 - 800,000
Lead Software Engineer | Johannesburg | Permanent
Lead Software Engineer | Johannesburg | Permanent

Edge Executive Search Group • Johannesburg

On-site
ZAR 1,000,000 - 1,800,000
Lead DevSecOps Engineer
Lead DevSecOps Engineer

ATS Client • Cape Town

Hybrid
ZAR 1,100,000 - 1,900,000
Competitive salary
30 days annual leave + 3 mental health
Medical aid contribution up to R2,000
+4
Principal Engineer (Full - Stack / Platform / Data)
Principal Engineer (Full - Stack / Platform / Data)

Lesaka Technologies Inc. • Cape Town

Hybrid
ZAR 800,000 - 1,100,000
AI / Security Specialist (Cyber security)
AI / Security Specialist (Cyber security)

Black Pen Recruitment • Cape Town

On-site
ZAR 600,000 - 800,000
Growth / Technical Marketing Lead (Cyber security)
Growth / Technical Marketing Lead (Cyber security)

Black Pen Recruitment • Cape Town

Hybrid
ZAR 600,000 - 900,000
Head of Security
Head of Security

Chosen Online Pty Ltd • Cape Town

On-site
Continuous learning budget
Competitive salary + benefits
Opportunity to pioneer AI-driven security
Lead Software Engineer | Johannesburg | Permanent
Lead Software Engineer | Johannesburg | Permanent

Edgexec (Pty) Ltd • Johannesburg

On-site
ZAR 1,200,000 - 1,800,000
AI Platform Engineer
AI Platform Engineer

ATS Client • Cape Town

Hybrid
ZAR 900,000 - 1,200,000
AI / Security Specialist (Cyber security)
AI / Security Specialist (Cyber security)

ATS Client • Cape Town

On-site
ZAR 700,000 - 1,100,000