Lead Security Engineer

AngelList•New York City, NY

1d•$240,000•Hybrid

About The Position

AngelList is building the financial system for private markets, which are currently valued at $28T. The company has already established a strong presence in venture capital with over $200B in assets and 30,000+ startups funded on its platform. AngelList is now expanding its offerings with Funds (software and services for private funds), Nova (a banking network), Meridian (a wealth platform for accredited investors), and USVC (a registered fund for broader venture investment). The company is seeking a Lead Security Engineer to design and build systems that make security an inherent part of their infrastructure. This role involves creating a unified identity and access layer, enhancing cloud security, automating provisioning and revocation, and establishing guardrails for rapid development. The engineer will collaborate with Infrastructure, Engineering, IT, and Product teams. A key aspect of the role is leveraging AI to transform security operations, moving beyond faster alert triage to systems that possess context, make decisions, and perform autonomous remediation. The position reports to the Head of Security and is part of a small team with significant responsibilities.

Requirements

7+ years across security engineering, cloud security, infrastructure security, or identity — including deep hands-on AWS/GCP security architecture and IAM.
Write real software. You build automation and internal tooling to solve security problems rather than relying on commercial products, and you know when buying is the better call.
Have driven security changes across engineering teams that didn't report to you, through influence and better tooling rather than mandates.
Fluent in infrastructure-as-code, CI/CD, and modern DevOps.
You have shipped security controls into engineering platforms that developers actually adopted.
Reason about systems, not findings. You spot systemic weaknesses and fix the class of problem rather than the instance.
Built something with AI that changed how you work and have opinions about where human judgment still belongs.

Nice To Haves

If you don’t meet every requirement above, we still encourage you to apply. We value complementary strengths and operators who learn by doing.

Responsibilities

Own AngelList’s security foundations across AWS infrastructure, identity, access control, authentication, authorization, and secrets management.
Design and build security architecture and guardrails into infrastructure-as-code, CI/CD, and developer workflows so secure defaults are automatic.
Build IAM systems and least-privilege access models that scale across employees, services, and machine identities — including access reviews and privileged access.
Write security tooling and automation that finds weaknesses and remediates them without human intervention, harnessing AI where it raises decision quality.
Solve security risks at the platform and architectural level, and contribute to application security through threat modeling, secure design, and vulnerability remediation.