Lead Security Engineer

Pipe builds embedded financial solutions for small businesses and software companies. The Lead Security Engineer helps protect Pipe and its users by building security systems, monitoring and improving security posture, supporting compliance, and partnering across teams on security standards and incident response.

Responsibilities:

• Review and help design robust security standards and monitoring
• Maintain and improve our policy-as-code platform to enable rapid detection and response
• Work closely with our Infrastructure team to ensure cloud-based deployments have proper monitoring and adhere to our policies
• Manage SOC II audits, set a high standard for compliant software and processes, and ensure we consistently meet those standards
• Participate in on-call rotation to support critical security issues
• Own the vulnerability disclosure program and triage inbound reports to security@
• Run periodic tabletop exercises and incident response drills
• Maintain security policies and lead recurring reviews (e.g., firewall changes, security reviews)
• Lead responses to partner and customer security questionnaires
• Maintain the security risk register, track remediation, and produce periodic security metrics for leadership

Requirements:

• Hands-on experience with cloud platforms (GCP preferred) and Kubernetes security
• Proficiency in at least one of Go, Python, or TypeScript - enough to build and maintain internal tooling
• Experience owning SOC 2 (or equivalent) compliance programs end-to-end, including evidence collection, auditor management, and remediation
• Experience running incident response, including on-call, post-mortems, and tabletop exercises
• Experience managing vendor risk reviews and responding to customer security questionnaires
• Strong written communication