Lead Security Engineer

AngelList•San Francisco, CA

2d•$240,000•Hybrid

About The Position

AngelList is building the financial system for private markets, which are currently valued at $28 trillion. The company has already established significant structural innovations in venture capital over the last decade and is now expanding its platform to include funds, banking, wealth management, and investment opportunities for a broader audience. With over $200 billion in assets and 30,000+ startups funded, AngelList is poised to revolutionize the private markets. This role is for a hands-on engineer who will design and build systems that embed security into the core of their infrastructure. The focus will be on creating systems where the secure path is the easiest, encompassing unified identity and access, cloud security, automated provisioning, and guardrails for rapid development. A key aspect of this role involves leveraging AI to transform security engineering, moving beyond alert triage to autonomous remediation and decision-making. The position reports to the Head of Security and is part of a small team with a broad impact.

Requirements

7+ years across security engineering, cloud security, infrastructure security, or identity — including deep hands-on AWS/GCP security architecture and IAM.
Write real software. You build automation and internal tooling to solve security problems rather than relying on commercial products, and you know when buying is the better call.
Have driven security changes across engineering teams that didn't report to you, through influence and better tooling rather than mandates.
Fluent in infrastructure-as-code, CI/CD, and modern DevOps. You have shipped security controls into engineering platforms that developers actually adopted.
Reason about systems, not findings. You spot systemic weaknesses and fix the class of problem rather than the instance.
Built something with AI that changed how you work and have opinions about where human judgment still belongs.

Responsibilities

Own AngelList’s security foundations across AWS infrastructure, identity, access control, authentication, authorization, and secrets management.
Design and build security architecture and guardrails into infrastructure-as-code, CI/CD, and developer workflows so secure defaults are automatic.
Build IAM systems and least-privilege access models that scale across employees, services, and machine identities — including access reviews and privileged access.
Write security tooling and automation that finds weaknesses and remediates them without human intervention, harnessing AI where it raises decision quality.
Solve security risks at the platform and architectural level, and contribute to application security through threat modeling, secure design, and vulnerability remediation.