Staff Software Engineer - Security
Own security architecture and compliance for an AI-native platform in a startup environment.
Posted by employer 2 days ago
First seen on Joblaze 20 hours ago
Last verified on the company career page 20 hours ago
Skills & Technologies
What you'll build
- Own security architecture across the platform
- Harden the full stack
- Drive SOC 2 compliance
- Secure AI and agentic systems
- Build security tooling
Must have
- 8+ years building production software
- Deep experience in application and cloud security
- Experience in a regulated or high-trust environment
- Solid on threat modeling and secure architecture
Nice to have
- Export control experience
- ITAR experience
- FedRAMP experience
- Experience securing AI or LLM systems
AI in the day-to-day
Collaborate with AI agents to design, validate, and evolve complex systems.
Requirements
- Experience
- 8+ years
Not disclosed in this posting: compensation, work arrangement, visa sponsorship.
Benefits
Joblaze summary
In this role, the Staff Software Engineer for Security at Flow Engineering is responsible for establishing and managing the security architecture of the platform, focusing on threat modeling and secure design practices. The position requires extensive experience in application and cloud security, particularly within regulated environments, and familiarity with SOC 2 compliance and AI system security. This role is ideal for a seasoned professional with a strong background in secure software development and a proactive approach to security leadership in a startup setting.
Joblaze insights
Quick facts
- How much experience is required?
- At least 8 years of relevant experience for this Staff Software Engineer - Security role.
- What's the tech stack?
- Joblaze extracted these technologies from the posting: AI/ML, Node.js, PostgreSQL, Python, TypeScript.
- What seniority level is this role?
- Flow Engineering targets staff-level candidates for this position.
- Is this full-time or contract?
- Full-time for this Staff Software Engineer - Security role at Flow Engineering.
From the original posting
About the role
Our customers in defense, aerospace and more trust us with sensitive systems requirements. That means security is a first-order part of the product, so we’re looking for a Staff Software Engineer to own it.
This is our first dedicated security hire, so you'll define the security architecture, harden the platform, and build out the compliance posture. Since LLMs and agentic workflows sit at the center of what we do, you'll also lead how we secure them.
What you'll do
Own security architecture across the platform: threat modeling, secure design reviews, and the standards we build against.
Harden the full stack, from application security to cloud infrastructure (identity, network, secrets), tenant isolation, and data protection.
Drive SOC 2 and get us ready for the certifications defense and aerospace customers ask about, including export control and ITAR.
Secure our AI and agentic systems: prompt injection, data leaking through models, what actions agents are allowed to take, and guardrails.
Build the security tooling we need across detection, monitoring, vulnerability management, and CI/CD.
Stand up incident response and run it, from detection through postmortems.
Work with sales and product to get through security reviews and win customer confidence.
About you
8+ years building production software, including running secure services at scale in the cloud.
Deep experience in application and cloud security (AWS, GCP, or Azure): identity and access, secrets, network security, data protection.
You've owned security in a regulated or high-trust environment and have implemented SOC 2 yourself. Export control, ITAR, or FedRAMP experience is a big plus.
Solid on threat modeling, secure architecture, and incident response.
You've secured AI or LLM systems.
You're comfortable being the security lead at a startup and setting the agenda yourself.
Our stack (AI-leaning)
TypeScript/Node.js and Python for AI and backend services.
Modern LLM APIs and orchestration libraries for building agentic workflows.
Postgres and other managed cloud services for data and state.
How we work & values
Speed over everything: prototype AI workflows quickly, then harden what works.
Own, downscope, ship, iterate: one clear owner per feature, from prototype to production.
Fundamentals done well: evaluation, observability, and safety are part of the first version, not an afterthought.
Competitive salary and meaningful equity.
Health, dental, and vision coverage.
Flexible time off and support for experimentation, learning, and staying current with the AI ecosystem.
Standard company text repeated across Flow Engineering's postings is omitted here.