Security Engineer

Oscar Faye is recruiting on behalf of a seed-stage company building enterprise identity infrastructure. The Security Engineer will serve as the first security hire, owning application and product security, detection and response, security automation, cloud and Kubernetes security, and the protection of identity protocols and cryptographic infrastructure.

Responsibilities:

• Own application and product security for a live, shipping product
• Build and maintain detection coverage, including detection-as-code
• Triage security alerts and lead incident response
• Develop Python automation to reduce manual security operations work
• Secure cloud and Kubernetes infrastructure
• Contribute to the security of core identity protocols and cryptographic infrastructure
• Operate as a generalist across the full security surface of an early-stage company

Requirements:

• 5+ years of professional security engineering experience
• MUST have experience in a start up environment building security systems end-to-end
• Hands-on application or product security ownership on a real production product
• Detection and response experience you built rather than inherited, including writing detections, triage and incident response
• Python automation
• Currently hands-on and shipping
• Comfortable wearing multiple hats at a company of this size
• Identity and access management background
• Kubernetes and cloud security, GCP preferred
• Familiarity with OAuth, SAML, OIDC or WebAuthn
• Go
• Compliance exposure such as SOC 2, ISO 27001 or GDPR
• Prior experience as an early security hire