About the company
Our client is a software company.
The role
Raydar is recruiting for this role on behalf of our client. Take charge of security for a software product and the business behind it, covering design reviews, product-level protections, outside assurance work and incident preparedness. The role blends hands-on engineering with setting standards and communicating risk to technical and non-technical audiences.
What you'll do
- Hold overall responsibility for security across application, cloud and network layers.
- Run design reviews and threat assessments for new systems with few established patterns.
- Engineer protective features directly into the product, such as customer data separation, safe secret usage, human sign-off steps and detailed activity records.
- Author the security documentation that prospective technical customers read before adopting the product.
- Coordinate third-party testing, compliance programs and customer security questionnaires and reviews.
- Lead incident preparedness and response, including fast notification commitments.
- Maintain ongoing cloud access auditing and automate automated security checks within build and deployment pipelines.
- Define internal policies for handling sensitive customer secrets, outbound data and device management.
Requirements
What we're looking for
- At least 4 years of hands-on experience in application and infrastructure security.
- Solid coding ability in a modern language such as Python or Go.
- Practical skill at assessing threats and finding vulnerabilities.
- Working knowledge of network security and identity-centered access controls for services and workloads.
- Strong grounding in security on a leading cloud platform, including federated identity and codified infrastructure.
- Skill at explaining risk and trade-offs to both engineers and senior business leaders.
- Comfort operating independently in ambiguous situations.
- Willingness to work in the office five days a week in a fast-paced startup setting.
Bonus points
- Background securing autonomous or code-running systems.
- Deep knowledge of workload isolation and system hardening techniques.
- Experience in offensive security or penetration testing.
- Experience operating a vulnerability reporting or reward program.
- A track record of guiding a company through audits and customer security reviews.
- Familiarity with corporate IT environments and access management tooling.
Benefits
Compensation and benefits
- Base salary: USD 200,000 to 300,000 per year
- Health insurance
- Flexible time off
Location and work model
- San Francisco, CA, United States
- On-site, five days per week
- Full-time
Similar Jobs
What you need to know about the San Francisco Tech Scene
Key Facts About San Francisco Tech
- Number of Tech Workers: 365,500; 13.9% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Google, Apple, Salesforce, Meta
- Key Industries: Artificial intelligence, cloud computing, fintech, consumer technology, software
- Funding Landscape: $50.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Sequoia Capital, Andreessen Horowitz, Bessemer Venture Partners, Greylock Partners, Khosla Ventures, Kleiner Perkins
- Research Centers and Universities: Stanford University; University of California, Berkeley; University of San Francisco; Santa Clara University; Ames Research Center; Center for AI Safety; California Institute for Regenerative Medicine
