Note: The job is a remote job and is open to candidates in USA. OpenSpace is an AI-powered Visual Intelligence Platform company helping construction teams monitor complex projects through computer vision and spatial AI. The Sr. Security Engineer will strengthen proactive application and product security by conducting security reviews, managing AI-related security risks, supporting vulnerability remediation and compliance programs, improving incident response, and building security automation.
Responsibilities
- Run proactive security reviews of new features, architectures, and third-party integrations before they ship
- Assist in optimizing our application and product security practice: threat modeling, design review, secure SDLC integration
- Ownership in our approach to AI-related security risk, including:
- Securing our own AI/ML systems and the data flowing through them
- Governing internal use of AI dev tools (Claude Code and similar) so we move fast without leaking sensitive data
- Reviewing AI-assisted code contributions and helping us evolve our policies as the tooling matures
- Partner with engineering teams to triage and remediate vulnerabilities from pen tests, customer findings, and internal discovery
- Support our SOC 2 and ISO 27001 programs as a key technical contributor (compliance ownership lives elsewhere, but you'll be the engineering voice in the room)
- Help mature our incident response practice and run security tabletop exercises
- Build internal tooling and automation that scales security review without bottlenecking shipping
- Work with our consultant on scoping pen tests, vendor assessments, and customer security reviews
Skills
- * 5+ years in security engineering, application security, or product security
- * Hands-on experience doing proactive security review (threat modeling, design review, secure code review) on production systems
- * Strong fundamentals in web application security, cloud security (we run primarily on AWS and GCP), and modern auth patterns
- * Comfortable reading and reviewing code across at least one of our stacks (Python, Java/Kotlin, TypeScript)
- * A real point of view on how AI changes the security landscape, both as a new risk surface and as new tooling for defenders
- * Track record of working effectively in a startup or fast-moving environment where you have to prioritize ruthlessly and make tradeoffs
- * Ability to influence engineers without owning their roadmap
- Applicants must be authorized to work in the country of employment without current or future sponsorship
- * Experience as the first or early security hire at a growth-stage company
- * Hands-on contributor experience with SOC 2 and/or ISO 27001
- * Background in security automation, internal tooling, or open source security work
- * Familiarity with construction tech, geospatial systems, or computer vision
Benefits
- 100% employer-paid medical, dental, and vision coverage
- Flexible paid time off
- 401(k) with company match
- Paid parental leave
- Home office stipend
- Employee referral program
- Annual company retreats and team gatherings
Company Overview