Sr. Security Engineer

OpenSpace is redefining how the world’s most complex projects are built with their AI-powered Visual Intelligence Platform. They are seeking a Senior Security Engineer to build a proactive security review process within the engineering team, ensuring security measures are in place before features are shipped.

Responsibilities:

• Run proactive security reviews of new features, architectures, and third-party integrations before they ship
• Build out our application and product security practice: threat modeling, design review, secure SDLC integration
• Own our approach to AI-related security risk, including:
• Securing our own AI/ML systems and the data flowing through them
• Governing internal use of AI dev tools (Claude Code and similar) so we move fast without leaking sensitive data
• Reviewing AI-assisted code contributions and helping us evolve our policies as the tooling matures
• Partner with engineering teams to triage and remediate vulnerabilities from pen tests, customer findings, and internal discovery
• Support our SOC 2 and ISO 27001 programs as a key technical contributor (compliance ownership lives elsewhere, but you'll be the engineering voice in the room)
• Help mature our incident response practice and run security tabletop exercises
• Build internal tooling and automation that scales security review without bottlenecking shipping
• Work with our consultant on scoping pen tests, vendor assessments, and customer security reviews

Requirements:

• 5+ years in security engineering, application security, or product security
• Hands-on experience doing proactive security review (threat modeling, design review, secure code review) on production systems
• Strong fundamentals in web application security, cloud security (we run primarily on AWS and GCP), and modern auth patterns
• Comfortable reading and reviewing code across at least one of our stacks (Python, Java/Kotlin, TypeScript)
• A real point of view on how AI changes the security landscape, both as a new risk surface and as new tooling for defenders
• Track record of working effectively in a startup or fast-moving environment where you have to prioritize ruthlessly and make tradeoffs
• Ability to influence engineers without owning their roadmap
• Experience as the first or early security hire at a growth-stage company
• Hands-on contributor experience with SOC 2 and/or ISO 27001
• Background in security automation, internal tooling, or open source security work
• Familiarity with construction tech, geospatial systems, or computer vision