The Role
Own Tsuga’s product, infrastructure, and customer-facing security program as its first dedicated Security Engineer. Responsibilities include threat modeling, cloud and Kubernetes security, secure development practices, compliance automation for ISO 27001 and SOC 2, customer security reviews, incident communication, vulnerability management, and security process development. The role partners with engineers, customers, auditors, and leadership to raise the company’s security posture.
Summary Generated by Built In
👉 You don't have to match 100% of the requirements. If you believe you're a strong fit, we'd love to hear from you.
🌟We just raised $35M in Series A, if you join Tsuga you will experience a strong growth.
At Tsuga, security has always been everyone’s responsibility. We want to keep it that way — but we’ve reached the point where we need someone whose full-time focus is raising the bar, setting the direction, and making it easy for every engineer to build securely.
As our first dedicated Security Engineer, you’ll shape how security works at Tsuga from the ground up. You’ll have the opportunity to influence our product, infrastructure, engineering practices, and customer-facing security, with direct support from the CTO.
You’re not starting from scratch. We already have:
- mTLS between our control plane and customer clusters, tunneled connections, and strong admin authentication
- Aikido for code and dependency scanning, and Drata for compliance automation
- ISO 27001 and SOC 2 certification
- Own our security posture across the product — including the control plane, customer data planes, and internal tooling. Define security practices, review designs, and help engineers ship securely.
- Partner with our Forward Deployed Engineers to ensure customers receive clear, consistent, and timely communication around security incidents and vulnerabilities.
- Drive compliance and certifications alongside the CTO. Improve and automate the evidence collection and processes behind ISO 27001 and SOC 2.
- Threat-model critical systems that interact with customer environments, including credentials, tunnels, deployment paths, and IAM.
- Own the customer security process, from questionnaires and pentests to security reviews, and turn it into a scalable, repeatable workflow.
- Build security into the development lifecycle through CI checks, dependency management, secrets management, and infrastructure-as-code reviews.
- Hands-on experience securing cloud infrastructure and Kubernetes, ideally across multiple cloud providers.
- You’re comfortable reading and writing code. Our stack includes TypeScript, Rust, Python, and Pulumi — you don’t need to know all of them, but you should be comfortable reviewing and contributing to code.
- Experience with at least one SOC 2 or ISO 27001 certification cycle, and a good sense of what effective security and compliance tooling looks like.
- A pragmatic approach to risk. You enable engineers rather than gatekeep them.
- Strong communication skills — you can work effectively with engineers, customers, auditors, and leadership.
- 🔥 We move fast. As an early-stage startup, we are pragmatic, we value ownership, and quick feedback over unnecessary process and hierarchy.
- 🙏 We solve problems, not blame people. When something goes wrong, we fix it, learn from it, and improve the system.
- 🛠️ We are builders. We start everything from a blank page and we lean on your colleagues' knowledge to move faster.
- 🙇 We are customer-obsessed. We dogfood Tsuga every day, so you care how the product is actually used and want to contribute ideas.
- 💥 We lean hard on AI, but not blindly. Our problems are hard and can’t be AI-slopped away.
- 🌍 We're international from day one. Every quarter, the whole team meets at our French office to align on company goals, celebrate wins, and connect with teammates from the US, UK, the Middle East, and across Europe.
Skills Required
- Hands-on experience securing cloud infrastructure and Kubernetes
- Comfort reading and writing code and reviewing or contributing to TypeScript, Rust, Python, or Pulumi code
- Experience with at least one SOC 2 or ISO 27001 certification cycle
- Pragmatic risk-management approach that enables engineers
- Strong communication skills with engineers, customers, auditors, and leadership
- Experience securing infrastructure across multiple cloud providers
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Tsuga provides an enterprise observability and monitoring platform for developers and engineering teams. Its bring-your-own-cloud architecture runs inside a customer’s AWS environment, keeping telemetry in the customer’s cloud and under its encryption keys and governance controls. The platform supports logs, metrics, traces, and application performance management, while providing dashboards, alerts, AI-powered workflows, infrastructure monitoring, and operational support without the burden of self-hosting.
