Note: The job is a remote job and is open to candidates in USA. Xcede is partnering with a high-growth, venture-backed Data & AI infrastructure company that pioneered a Composable Customer Data Platform and expanded into AI Decisioning. The Lead Application Security Engineer will be the first dedicated security hire, taking end-to-end ownership of application security and building security capabilities from the ground up. The role focuses on hands-on engineering across multi-tenant security, authorization, cloud architecture, APIs, threat modeling, and data privacy.
Responsibilities
- This person will become the first dedicated security hire and take end-to-end ownership of application security as the engineering organization scales from roughly 70 to 140+ engineers
- Multi-tenant isolation across a platform running ~1M data syncs per day and ingesting 100K+ events/sec
- Designing sophisticated authorization & access-control models for multi-team and multi-brand environments
- Security architecture, threat modeling & product hardening
- Securing high-throughput, internet-facing APIs and improving rate limiting and abuse detection
- Designing and improving compute isolation
- Securing a multi-region, multi-cloud architecture spanning AWS, Azure & GCP
- Supporting data residency and privacy requirements for a global customer base
Skills
- You should be comfortable reading application code, threat modeling distributed systems and shipping production fixes, with strong experience across areas such as multi-tenant security, authorization, cloud security and data infrastructure
- Ideally, you've previously been one of the first 1–3 security hires at a SaaS or data infrastructure company and have experience building security capabilities rather than simply operating an established program
Benefits
- Equity
- Remote — US & Canada
- Visa sponsorship available for certain transfers/visa types
Company Overview