About the company
Our client is a software company.
The role
Raydar is recruiting for this role on behalf of our client. Take charge of security for a software product and the business behind it, covering design reviews, product-level protections, outside assurance work and incident preparedness. The role blends hands-on engineering with setting standards and communicating risk to technical and non-technical audiences.
What you'll do
- Hold overall responsibility for security across application, cloud and network layers.
- Run design reviews and threat assessments for new systems with few established patterns.
- Engineer protective features directly into the product, such as customer data separation, safe secret usage, human sign-off steps and detailed activity records.
- Author the security documentation that prospective technical customers read before adopting the product.
- Coordinate third-party testing, compliance programs and customer security questionnaires and reviews.
- Lead incident preparedness and response, including fast notification commitments.
- Maintain ongoing cloud access auditing and automate automated security checks within build and deployment pipelines.
- Define internal policies for handling sensitive customer secrets, outbound data and device management.
Requirements
What we're looking for
- At least 4 years of hands-on experience in application and infrastructure security.
- Solid coding ability in a modern language such as Python or Go.
- Practical skill at assessing threats and finding vulnerabilities.
- Working knowledge of network security and identity-centered access controls for services and workloads.
- Strong grounding in security on a leading cloud platform, including federated identity and codified infrastructure.
- Skill at explaining risk and trade-offs to both engineers and senior business leaders.
- Comfort operating independently in ambiguous situations.
- Willingness to work in the office five days a week in a fast-paced startup setting.
Bonus points
- Background securing autonomous or code-running systems.
- Deep knowledge of workload isolation and system hardening techniques.
- Experience in offensive security or penetration testing.
- Experience operating a vulnerability reporting or reward program.
- A track record of guiding a company through audits and customer security reviews.
- Familiarity with corporate IT environments and access management tooling.
Benefits
Compensation and benefits
- Base salary: USD 200,000 to 300,000 per year
- Health insurance
- Flexible time off
Location and work model
- San Francisco, CA, United States
- On-site, five days per week
- Full-time
Skills Required
- At least 4 years of hands-on experience in application and infrastructure security
- Coding ability in a modern language such as Python or Go
- Practical threat assessment and vulnerability identification skills
- Working knowledge of network security and identity-centered access controls for services and workloads
- Strong knowledge of security on a leading cloud platform, including federated identity and infrastructure as code
- Ability to explain risks and trade-offs to engineers and senior business leaders
- Ability to operate independently in ambiguous situations
- Willingness to work in the office five days per week
- Experience securing autonomous or code-running systems
- Knowledge of workload isolation and system hardening techniques
- Experience in offensive security or penetration testing
- Experience operating a vulnerability reporting or reward program
- Experience guiding a company through audits and customer security reviews
- Familiarity with corporate IT environments and access management tooling
What We Do
Raydar is a talent acquisition and business consulting firm that connects world-class and emerging talent with growing organizations. It supports companies through team development, strategic hiring, and customized growth solutions, helping clients recruit roles such as engineers, product managers, executives, legal counsel, and quantitative traders. Raydar focuses on understanding each organization’s needs, culture, and long-term goals to build high-impact teams.
