Founding Security Engineer

Washington, D.C., Remote. Posted 10 days ago

The role

The Founding Security Engineer will work across enterprise and product security to enable ambitious business goals. You will partner with engineering to embed security best practices and build detection, infrastructure security, and vulnerability management processes.

What you will do

Partner with engineering to embed security best practices into product design and implementation
Write, tune, and respond to Python-based rules to catch anomalous activity
Partner with Infrastructure team to secure GCP, cloud networking, and Kubernetes security
Strengthen application security and help make pragmatic upgrades
Improve security through code and automation
Own vulnerability management end-to-end
Build infrastructure and processes to increase company velocity
Develop technical and policy frameworks for AI adoption

Required qualifications

5–10 years of experience, with meaningful time focusing on security
Creative and collaborative problem solving
Strong understanding of cloud security and networking
Comfortable reading code and shipping fixes
Experience operating security tooling (endpoint/EDR, MDM, audit logging/alerting, CSPM)
Familiarity with GitHub, Terraform, and CI/CD security fundamentals

Nice to have

GCP preferred
Python scripting strongly preferred
WAFs / web app security controls
Threat modeling experience
Deep Kubernetes hardening/runtime experience

Benefits

Stock options
100% Paid Health Coverage for employees and dependents (medical, dental, and vision)
Hybrid Work
Self-managed FTO
12 paid holidays

Before you apply

Hiring is restricted to US persons, which includes US citizens and permanent residents
Candidates must reside in the US
Promise participates in E-Verify

About the company

Promise modernizes how government agencies and utilities support people in financial difficulty. The company builds technology to help residents receive benefits, engage with assistance programs, and set up flexible payment plans.