Lead Security Engineer

The role

You will contribute to Cloud Security, Application Security, Detection & Response, and Privacy. You will write code, build systems, and work cross-functionally to support the security mission.

What you will do

• Review and help design robust security standards and monitoring
• Maintain and improve our policy-as-code platform
• Work with the Infrastructure team to ensure cloud-based deployments adhere to policies
• Manage SOC II audits and ensure compliance standards are met
• Participate in on-call rotation to support critical security issues
• Own the vulnerability disclosure program and triage inbound reports
• Run periodic tabletop exercises and incident response drills
• Maintain security policies and lead recurring reviews
• Lead responses to partner and customer security questionnaires
• Maintain the security risk register and produce security metrics

Required qualifications

• Hands-on experience with cloud platforms and Kubernetes security
• Proficiency in at least one of Go, Python, or TypeScript
• Experience owning SOC 2 (or equivalent) compliance programs end-to-end
• Experience running incident response, including on-call, post-mortems, and tabletop exercises
• Experience managing vendor risk reviews and responding to customer security questionnaires
• Strong written communication

Nice to have

• GCP preferred

Benefits

• The best equipment to help you do your job
• Flexible vacation and work hours
• Excellent health, dental, and vision insurance
• Generous parental leave

About the company

Pipe Security's mission is to protect the firm and its users by preventing, detecting, and responding to cyber attacks. They are a team of software engineers and builders.