Flow Engineering is an AI-native requirements platform for modern engineering organizations, enabling hardware teams to collaborate with AI agents to design, validate, and evolve complex systems with speed and rigor.
About the roleOur customers in defense, aerospace and more trust us with sensitive systems requirements. That means security is a first-order part of the product, so we’re looking for a Staff Software Engineer to own it.
This is our first dedicated security hire, so you'll define the security architecture, harden the platform, and build out the compliance posture. Since LLMs and agentic workflows sit at the center of what we do, you'll also lead how we secure them.
What you'll doOwn security architecture across the platform: threat modeling, secure design reviews, and the standards we build against.
Harden the full stack, from application security to cloud infrastructure (identity, network, secrets), tenant isolation, and data protection.
Drive SOC 2 and get us ready for the certifications defense and aerospace customers ask about, including export control and ITAR.
Secure our AI and agentic systems: prompt injection, data leaking through models, what actions agents are allowed to take, and guardrails.
Build the security tooling we need across detection, monitoring, vulnerability management, and CI/CD.
Stand up incident response and run it, from detection through postmortems.
Work with sales and product to get through security reviews and win customer confidence.
8+ years building production software, including running secure services at scale in the cloud.
Deep experience in application and cloud security (AWS, GCP, or Azure): identity and access, secrets, network security, data protection.
You've owned security in a regulated or high-trust environment and have implemented SOC 2 yourself. Export control, ITAR, or FedRAMP experience is a big plus.
Solid on threat modeling, secure architecture, and incident response.
You've secured AI or LLM systems.
You're comfortable being the security lead at a startup and setting the agenda yourself.
TypeScript/Node.js and Python for AI and backend services.
Modern LLM APIs and orchestration libraries for building agentic workflows.
Postgres and other managed cloud services for data and state.
Speed over everything: prototype AI workflows quickly, then harden what works.
Own, downscope, ship, iterate: one clear owner per feature, from prototype to production.
Fundamentals done well: evaluation, observability, and safety are part of the first version, not an afterthought.
Competitive salary and meaningful equity.
Health, dental, and vision coverage.
Flexible time off and support for experimentation, learning, and staying current with the AI ecosystem.
Skills Required
- 8+ years building production software
- Experience running secure services at scale in the cloud
- Deep application and cloud security experience
- Experience with AWS, GCP, or Azure
- Experience with identity and access, secrets, network security, and data protection
- Experience owning security in a regulated or high-trust environment
- Experience implementing SOC 2
- Experience with threat modeling, secure architecture, and incident response
- Experience securing AI or LLM systems
- Ability to independently lead security at a startup
- Export control, ITAR, or FedRAMP experience
What We Do
Systems engineering is broken. Despite their desperation, engineers' tools are stuck in the dark ages. Engineers are forced to use Word documents and email to stay on the same page, with no real way to collaborate and iterate designs together. Our mission is to vastly accelerate hardware design by building software tools that accelerate the baseline engineering process worldwide. Our product, Flow, is a requirements tool, built for agile teams, that helps teams to bring products to market faster by seamlessly integrating and synchronising their engineering models. Flow is helping teams design their next-generation products, from heavy-duty hydrogen-powered trucks, Electric Vehicles for inner cities, to satellites and rockets. Flow has raised over $9M in Seed funding. Our investors include EQT Ventures, and former C-level execs and leaders from Microsoft, SAP and Unity.
