Principal Security Engineer

The role

As the founding security hire, you will define the risk model, set the security roadmap, and implement security procedures in code. You will manage security across a cloud native ecosystem using AWS and GCP.

What you will do

• Map Vibe's risk model across every major system.
• Set the security roadmap with clear priorities.
• Pave the road with guardrails and secure defaults across the engineering tool set.
• Ship the golden paths.
• Harden security across AWS, GCP, and third-party providers.
• Own access management from onboarding to offboarding.
• Prioritize vulnerability findings and follow remediation through to closure.
• Own security incident response from detection through resolution.
• Turn manual processes into pipelines.
• Launch and run Vibe's private bug bounty program.

Required qualifications

• Built a security function as a company's first security hire.
• Write code comfortably.
• Deep cloud-native security experience.
• Managed a compliance framework at scale, such as SOC 2, ISO 27001 or HIPAA.
• Managed AI security risk hands on, both in what a company ships with AI and in how its employees use it day to day.

Nice to have

• Ran a private bug bounty program.
• Ad tech security background, including exposure to US privacy law (CCPA/CPRA, VPPA) in a data-heavy environment.
• Navigated security through a company acquisition.

Benefits

• Relocation support to Paris for great candidates.
• Variable pay — Based on real Vibe business goals.
• Hybrid flexibility — 3x a week in the Heart of Paris.
• Health insurance — Full coverage via Alan.
• Meal vouchers — Via Swile.
• Annual offsite — Once a year.
• Tech Syncs — Engineering and Product meet in person at least quarterly, worldwide.

Before you apply

• Recruiter Screen
• Hiring Manager Interview
• Technical Assessment
• Bar Raiser Interview

About the company

Vibe.co is an Audience First Streaming TV Advertising platform. It became a Walmart company in August 2026.