Senior Security Engineer – VC Backed Startups

SignalFire

Senior/Staff Security Engineer joining SignalFire’s talent network for VC-backed startups. Designing security controls, assessing vulnerabilities, and building scalable security practices across portfolio companies.

Posted 8/5/2026full-timeNew York City • New York • 🇺🇸 United StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in security engineering, application security, and cloud security, with a strong foundation in software engineering. Proficient in threat modeling, vulnerability management, and integrating security controls into development processes.

Highest-signal resume keywords

Security EngineeringCloud SecurityPython ProgrammingThreat ModelingVulnerability Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Application SecurityInfrastructure SecuritySecure Coding StandardsPenetration TestingCI/CD IntegrationVulnerability ResearchIncident ResponseSecurity AutomationRisk PrioritizationTechnical Compliance

Soft Skills

CommunicationJudgmentMentoring

Tools & Technologies

AWSGCPAzureIdentity ManagementSecrets ManagementEncryptionNetwork Security

Certifications & Qualifications

SOC 2ISO 27001HIPAAPCI DSS

Industry Keywords

Security ControlsCloud-Native ApplicationsSecurity AssessmentsTechnical GuardrailsSecurity Policies

Tech Stack

Tools & technologies

AWSAzureCloudGoGoogle Cloud PlatformJavaJavaScriptPythonRustTypeScript

About the role

Key responsibilities & impact

Design and implement security controls across applications, cloud infrastructure, internal systems, and development environments
Conduct architecture reviews, threat modeling, code reviews, and security assessments for new products and features
Identify, prioritize, and remediate vulnerabilities across the technology stack
Embed security into the software development lifecycle through secure coding standards, automated testing, and developer tooling
Build and improve detection, monitoring, incident response, and vulnerability management capabilities
Partner with engineering and infrastructure teams to strengthen cloud, container, network, identity, and access security
Lead or support the investigation and remediation of security incidents
Develop reusable security tooling, automation, documentation, and technical guardrails
Evaluate third-party technologies, integrations, and vendors for potential security risks
Support customer security reviews, enterprise diligence, and technical compliance requirements
Help establish security policies and controls aligned with frameworks such as SOC 2, ISO 27001, HIPAA, or PCI DSS
Mentor engineers and promote shared ownership of security across the organization
Submit an application to join SignalFire’s Talent Ecosystem
Work with SignalFire talent partners or portfolio-company leaders if a potential match is identified

Requirements

What you’ll need

5+ years of experience across security engineering, application security, cloud security, infrastructure security, or related disciplines
Strong software engineering or systems engineering foundation
Proficiency in languages such as Python, Go, Java, JavaScript, TypeScript, or Rust
Experience securing cloud-native applications and infrastructure on AWS, GCP, or Azure
Knowledge of common application and infrastructure vulnerabilities, attack techniques, and mitigation strategies
Experience with threat modeling, secure design reviews, penetration testing, or vulnerability research
Familiarity with identity and access management, secrets management, encryption, and network security
Experience building security automation and integrating controls into CI/CD pipelines
Ability to communicate technical risks and recommendations to engineering teams and business stakeholders
Strong judgment around risk prioritization, remediation, and balancing security with execution speed
Experience in venture-backed startups, security-sensitive industries, or rapidly scaling technology companies

Benefits

Comp & perks

Exclusive early-stage opportunities that may not be publicly listed
Profile visibility to SignalFire portfolio companies
Potential consideration for future Security Engineering roles across the portfolio