Member of Technical Staff - Security
About The Position
As a Member of Technical Staff – Security, your primary responsibility will be to secure every layer of WithCoverage: our products, production code, AWS infrastructure, AI systems, corporate technology, networks, and physical environment. You’ll help build our security architecture from the ground up while operating at startup speed. This is a hands-on engineering role. You won’t simply identify vulnerabilities or produce policies. You’ll write the code, Terraform, guardrails, detections, and internal tools that fix problems at their source. You’ll establish foundations such as RBAC, ABAC, tenant isolation, least-privilege access, secure networking, defense-in-depth, auditability, and incident response. You’ll also lead the technical work required to prepare WithCoverage for SOC 2, HIPAA, and related customer requirements. You’ll turn controls into continuously monitored systems, automate evidence collection, and make our security posture observable. Security here should increase our velocity, not create bureaucracy.
Requirements
- 4+ years of experience building or securing software and infrastructure in production environments. You are comfortable moving from identifying a risk to writing, deploying, and operating the solution yourself.
- You have hands-on experience securing AWS environments and understand IAM, networking, Linux, containers, infrastructure as code, CI/CD, secrets management, encryption, logging, and vulnerability management.
- You have built or substantially improved authentication, authorization, RBAC, ABAC, multi-tenant isolation, or other security-critical product infrastructure.
- You move quickly, exercise strong judgment, and know how to prioritize meaningful risks without introducing unnecessary processes. You communicate clearly with technical and non-technical teams and use AI to multiply your output.
- You have spent 2+ years at the same company in a prior role, with demonstrated promotions, growth, or meaningful recognition.
Nice To Haves
- Experience preparing for SOC 2 or HIPAA is strongly preferred.
Responsibilities
- Build our security architecture. Design and ship security improvements across our application code and AWS infrastructure. Build authentication, authorization, RBAC, ABAC, tenant isolation, IAM, secrets management, encryption, logging, secure networking, and other foundational controls.
- Automate security and compliance. Translate SOC 2, HIPAA, and customer requirements into technical controls. Automate evidence collection, access reviews, vulnerability detection, configuration monitoring, remediation, incident response, and recovery.
- Secure the company end to end. Protect our AI agents, sensitive client data, production systems, endpoints, corporate identities, office network, physical access, and vendors. Address AI-specific risks such as prompt injection, excessive tool permissions, data leakage, and unsafe autonomous actions.
- Make security move at startup speed. Build reusable modules, paved roads, and automated guardrails that let engineers ship securely without waiting on a security approval process. Make pragmatic build-versus-buy decisions, using software and AI to avoid expensive enterprise products when a focused internal capability is safer and more economical.
Benefits
- Competitive compensation that includes equity
- Comprehensive benefit plans for medical, dental, vision, life, and disability
- Pre-tax accounts (FSA, HSAs, dependent care FSAs, commuter savings)
- Human Interest: 401(k) provider
- Flexible time off, sick leave, family and medical leave, major national holidays
- A curated in-office employee experience, designed to foster community, team connections, and innovation
- Collaborative, transparent, and fun culture
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Entry Level
Education Level
No Education Listed
