Product Security Engineer, Infrastructure

Accordance•San Francisco, CA

7d•Onsite

About The Position

Accordance is a secure AI platform for professionals in accounting and finance that augments productivity and automates complex workflows. Accordance uses algorithms with reasoning-adept LLMs that have been customized by our expert team of finance professionals, engineers, and research scientists. We’ve found product-market fit and are scaling our team very quickly. This role is based in San Francisco, CA. We use an in-person work model and offer relocation assistance to new employees. You will report to our CTO and take ownership of securing the infrastructure that powers our main product, Accordance. As an early member of our Security team, you will help lay the foundations of the security and privacy. Your focus will be to secure customer data in our main product, for example by designing and implementing process and technologies for least privilege, isolating different components, managing attack surface, and by implementing layers of tenant isolation on our multi-tenant SaaS offering. As the company grows, you will work towards allowing our research and engineering teams to move more quickly and autonomously by building guardrails and repeatable patterns for managing their infrastructure.

Requirements

4+ years experience in Security, Software Engineering, or Site Reliability Engineering roles
Strong fundamentals in networking, operating systems, and cryptographic protocols
In-depth knowledge of distributed systems, common misconfigurations, and privilege escalation vectors
Demonstrated ability to find weaknesses (e.g. privilege escalation) in real-world cloud environments
Experience applying security best practices in cloud environments (AWS, Azure, or Google Cloud)
Software development experience

Responsibilities

Incorporate secure design principles into our cloud architecture.
Deploy infrastructure security solutions in collaboration with our infrastructure team, e.g. for production access management, certificate management, and audit logging
Develop isolation mechanisms (e.g. sandboxing) in collaboration with our product engineering team
Review security-critical configuration changes and act as Codeowner for security-critical parts of our cloud configurations (everything is IaC)
Audit our existing cloud environment for vulnerabilities
Develop policies and procedures for the secure creation and operation of our cloud environments