Security Engineer

The role

You will own product and application security for a single-tenant AI platform handling sensitive insurance data. You will build security into the SDLC, AppSec, cloud posture, and supply-chain.

What you will do

• Drive secure SDLC and security-focused code review across the engineering org.
• Own application security including authz, SSRF and injection prevention, and secrets management.
• Strengthen cloud security posture and keep per-customer environments consistent and hardened.
• Implement supply-chain controls.
• Coordinate penetration testing, threat modeling, and vulnerability management.
• Lead incident response and advance compliance readiness.

Required qualifications

• 4+ years in security engineering, with strong application security depth.
• Hands-on experience securing cloud-native systems, ideally single-tenant or per-customer deployments, including IAM, network boundaries, and secrets at scale.
• Working knowledge of OWASP-class risks and how to prevent them in real code.
• Ability to partner with engineers and make security practical, not blocking.

Nice to have

• Detection & response or compliance/GRC experience.
• Experience securing AI/LLM systems or regulated-data products.

Benefits

• A high-impact role with ownership from day one.
• Competitive compensation and meaningful equity.
• Direct collaboration with founders and real users.
• Remote-first flexibility.
• The opportunity to help build an AI-native product from the ground up.

About the company

Outmarket is the AI platform for insurance, trusted by more than 250 brokerages to run the work their business depends on. It is an AI-first company that automates quote comparisons, coverage gap and tower analysis, policy review, and proposal generation.