Founding Security Engineer

Promise • Washington, DC

6d • $170,000 - $230,000 • Hybrid

About The Position

Promise is seeking a Founding Security Engineer to work closely with builders across the company, enabling ambitious business goals while maintaining the high security standards its clients expect. The role spans enterprise and product security and includes hands-on work to deliver security outcomes. The engineer will help build infrastructure and processes that support company velocity, and develop technical and policy frameworks for safe, ambitious AI adoption.

Requirements

• 5–10 years of experience, including meaningful time focused on security.
• Creative, collaborative problem-solving skills, with an emphasis on enabling rather than obstructing.
• Strong understanding of cloud security and networking; GCP experience is preferred.
• Comfort reading code and shipping fixes; Python scripting is strongly preferred.
• Experience operating security tooling, including endpoint/EDR, MDM, audit logging/alerting, and CSPM.
• Familiarity with GitHub, Terraform, and CI/CD security fundamentals.
• Candidates must be US persons, including US citizens and permanent residents, and must reside in the US.

Nice To Haves

• Experience with WAFs or web application security controls.
• Threat modeling experience.
• Deep Kubernetes hardening or runtime experience.

Responsibilities

• Partner with engineering to embed security best practices into product design and technical implementation.
• Build and operate detection by writing, tuning, and responding to Python-based rules for anomalous activity and improved signal-to-noise.
• Partner with the Infrastructure team to secure GCP and cloud networking and improve Kubernetes security.
• Strengthen application security and make pragmatic upgrades, including to Next.js and dependencies.
• Improve security through code and automation, including guardrails, checks, and remediation workflows.
• Own vulnerability management end-to-end by identifying and prioritizing vulnerabilities and driving fixes to closure with codeowners.
• Build infrastructure and processes that increase company velocity while maintaining a high security standard.
• Develop technical and policy frameworks to guide company-wide AI adoption.

Benefits

• Stock options for all full-time employees.
• 100% paid base medical, dental, and vision insurance plans for employees and their dependents.
• Hybrid work, with in-office collaboration at least four days per week.
• Self-managed flexible time off.
• 12 paid holidays.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed