Security Engineer

The brands on your kitchen shelf are run by people doing extraordinary work that nobody sees.
We're building the platform they run on, and a brand they'll be proud to be part of.
Confido is the AI operating system that runs cash application, deductions, trade and planning in one place for CPG brands. That means Finance, Sales, and Ops finally work on the same number.
We’re trusted by 250+ brands managing $30B+ in revenue, including Daisy, OLIPOP, Simple Mills, Idahoan, and more. We've achieved best-in-class growth and recently raised a $55M Series B led by Insight Partners to accelerate our momentum.

If you want your work on shelves everywhere — and outsized ownership while you build — we'd love to meet you.

Every day, Confido processes remittances, deductions, retailer disputes, and trade spend for some of the fastest-growing brands in CPG. Our customers trust us with their bank data, ERP credentials, and retailer portal logins. We're hiring our first Security Engineer to make Confido the most trusted place for CPG brands to run their financial operations.

Your work will center on three areas:

• Confido builds products with an eye for security — secure defaults in our infrastructure, CI/CD, and application code, so the safe path is the easy one.

• Confido detects and responds to threats before they cause harm — visibility into what's happening across our cloud, apps, and vendors, and a clear plan when something goes wrong.

• Security powers Confido's growth — a security and compliance program that helps us win and keep enterprise customers instead of slowing deals down.

This is a hands-on role. You'll work closely with our DevOps and product engineers and with engineering leadership. We expect you to form your own opinions about where our security program needs to go and then make it happen.

• Take stock of Confido’s product and ecosystem to drive the security roadmap

• Build key security primitives that enable the engineering team to ship quickly and safely

• Build the systems to enable proactivity in security management

• Lead remediation of prioritized issues

• Partner with the engineering team to deploy secure systems

• 5+ years of experience building software or production infrastructure

• 3+ years of hands-on security work in AWS, with infrastructure as code (Terraform or similar)

• A working understanding of IAM, networking, Kubernetes, and secrets management

• Ability to write and review code in Python, Ruby, TypeScript, or another language

• A strong sense of ownership: you drive projects from inception through scaling them in production

• The judgment to weigh real risk against shipping speed, and to explain that tradeoff clearly

• Clear, concise written and verbal communication

• Desire to work in a fast-paced environment, continuously grow, and master your craft

• Experience leading or supporting a SOC 2 or similar compliance program

• Experience with systems that handle financial, payments, or other sensitive data

• Application security experience with Ruby on Rails or React

• Experience improving the developer experience and security properties of a multi-service deployment

• Experience at an early-stage, high-growth B2B SaaS company

We care much more about strong fundamentals than experience with any particular tool, but today we primarily use AWS, Kubernetes, Docker, Terraform, PostgreSQL, Python, Ruby on Rails, TypeScript, OpenTelemetry, Grafana/Prometheus, and GitHub Actions.

• Equity — own a meaningful piece of the company you’re helping build

• Fully paid health coverage through Aetna — we cover 100% of employee premiums

• Top-tier dental and vision coverage through Guardian

• Carrot Fertility Pro — comprehensive fertility and family-forming support

• 12 weeks of paid parental leave

• Unlimited PTO — plus regular 4-day holiday weekends we actually take

• 401(k) through Vestwell

• Paid relocation support — we’ll help you make the move to NYC

• Fully equipped workspace from day one — laptop, monitor, keyboard, and a $200 stipend to personalize your setup

• Team perks — catered Friday lunches, team dinners, and unlimited coffee + snacks featuring products from the brands we work with

Confido provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.