Key skills
Security EngineeringApplication SecuritySecure SDLCCode ReviewAuthorizationTenant IsolationSSRF PreventionInjection PreventionSecrets ManagementCloud Security PostureGoogle Cloud Platform IAMEgress ControlsSupply-Chain SecurityPenetration TestingThreat ModelingVulnerability ManagementIncident ResponseSOC 2 ComplianceOWASP RisksDetection and ResponseComplianceGovernance Risk and Compliance (GRC)AI/LLM SecurityRegulated Data SecurityAILLMGCPIAMSDLCOWASPCloud Security
About this role
Outmarket AI is an AI platform for insurance, trusted by over 250 brokerages to automate manual workflows. They are seeking a Security Engineer to own product and application security for their multi-tenant platform, ensuring the protection of sensitive insurance data.
Responsibilities:
- Drive secure SDLC and security-focused code review across the engineering org
- Own application security: authz, tenant isolation, SSRF and injection prevention, secrets management
- Strengthen cloud security posture (GCP IAM, egress controls) and supply-chain controls
- Coordinate penetration testing, threat modeling, and vulnerability management
- Lead incident response and advance compliance readiness (e.g., SOC 2)
Requirements:
- 4+ years in security engineering, with strong application security depth
- Hands-on experience securing cloud-native, multi-tenant systems
- Working knowledge of OWASP-class risks and how to prevent them in real code
- Ability to partner with engineers and make security practical, not blocking
- Detection & response or compliance/GRC experience
- Experience securing AI/LLM systems or regulated-data products