Promise Founding Security Engineer at Promise responsible for embedding security best practices and driving security outcomes across enterprise and product security. Works hands-on with engineering and infrastructure teams.
Responsibilities
Promise is looking for a Founding Security Engineer to accelerate our business. This role requires you to work closely with builders of varying technical depth, enabling our business’s ambitious goals while guaranteeing the high standard of security that our clients expect.
The work spans the breadth of enterprise security and product security, and frequently requires hands-on building to drive important security outcomes. If you like solving complex security problems in a rapidly-evolving tech landscape with an ambitious team, this is the role for you.
Partner closely with engineering to embed security best practices into product design and technical implementation, enabling the organization to move quickly without compromising on security.
Build and run detection: write, tune, and respond to Python-based rules to catch anomalous activity and improve signal-to-noise.
Partner with our Infrastructure team to secure GCP + cloud networking and improve Kubernetes security.
Strengthen application security and help make pragmatic upgrades (e.g., Next.js, dependencies).
Improve security through code + automation (guardrails, checks, remediation workflows).
Own vulnerability management end-to-end: identify, prioritize, and drive fixes to closure in coordination with codeowners.
Build infrastructure and processes to increase company velocity while upholding a high security standard.
Develop technical and policy frameworks to guide ambitious and safe AI adoption company-wide.
What Will Help You Succeed
5–10 years of experience, with meaningful time focusing on security.
Qualification
WAFs / web app security controlsThreat modeling experienceWho Thrives at PromiseYou’ll love it here ifYou are energized by bigYou want your work to have a real
Required
5–10 years of experience focusing on security
Strong understanding of cloud security and networking (GCP preferred)
Comfortable reading code and shipping fixes
Preferred
WAFs / web app security controls
Threat modeling experience
Deep Kubernetes hardening/runtime experience
Who Thrives at Promise
You’ll love it here if:
You are energized by big, complex challenges and the opportunity to solve them.
You want your work to have a real, measurable impact on people’s lives.
You take ownership and run toward problems, not away from them.
