Founding Security Engineer

About the role

We are looking for a founding Security Engineer to build and own the security program for our AI-powered personal safety platform. Reporting directly to the CEO/CTO, you will shape product and infrastructure security from day one, ensuring the safety of users, intellectual property and the company’s growth.

Key responsibilities

• Perform offensive security activities: continuous penetration testing, red-team exercises, phishing simulations, and attack simulations across web, mobile, APIs, cloud, hardware device and CI/CD pipelines.
• Manage vulnerability lifecycle: identify, prioritize and remediate OWASP Top 10, API security flaws, authentication/authorization issues, business‑logic attacks and AI‑specific risks such as prompt injection and model abuse.
• Secure cloud and infrastructure: design and harden AWS/Azure/GCP environments, IAM policies, VPCs, security groups, secrets management, Kubernetes/containers, logging, monitoring and disaster‑recovery processes.
• Define and enforce application security standards, secure‑deployment guidelines and incident response procedures.

Required profile

• Senior‑level security professional with at least 5 years of hands‑on experience in offensive and cloud security.
• Proven ability to design security programs from scratch and influence product architecture.
• Comfortable working in a fast‑moving startup environment and reporting directly to executive leadership.

Required skills

• Penetration testing and red‑team operations
• OWASP Top 10 and API security
• AI security (prompt injection, model abuse, data poisoning)
• Cloud security on AWS, Azure and GCP (IAM, VPC, security groups, secrets management)
• Kubernetes and container hardening
• CI/CD pipeline security
• Vulnerability identification and remediation