Security Engineer

Your work will center on three areas

• Confido builds products with an eye for security — secure defaults in our infrastructure, CI/CD, and application code, so the safe path is the easy one.
• Confido detects and responds to threats before they cause harm — visibility into what's happening across our cloud, apps, and vendors, and a clear plan when something goes wrong.
• Security powers Confido's growth – a security and compliance program that helps us win and keep enterprise customers instead of slowing deals down.

This is a hands-on role. You'll work closely with our DevOps and product engineers and with engineering leadership. We expect you to form your own opinions about where our security program needs to go and then make it happen.

What you'll do

• Take stock of Confido’s product and ecosystem to drive the security roadmap
• Build key security primitives that enable the engineering team to ship quickly and safely
• Build the systems to enable proactivity in security management
• Lead remediation of prioritized issues
• Partner with the engineering team to deploy secure systems

• 5+ years of experience building software or production infrastructure
• 3+ years of hands-on security work in AWS, with infrastructure as code (Terraform or similar)
• A working understanding of IAM, networking, Kubernetes, and secrets management
• Ability to write and review code in Python, Ruby, TypeScript, or another language
• A strong sense of ownership: you drive projects from inception through scaling them in production
• The judgment to weigh real risk against shipping speed, and to explain that tradeoff clearly
• Clear, concise written and verbal communication
• Desire to work in a fast-paced environment, continuously grow, and master your craft

• Experience leading or supporting a SOC 2 or similar compliance program
• Experience with systems that handle financial, payments, or other sensitive data
• Application security experience with Ruby on Rails or React
• Experience improving the developer experience and security properties of a multi-service deployment
• Experience at an early-stage, high-growth B2B SaaS company

We care much more about strong fundamentals than experience with any particular tool, but today we primarily use AWS, Kubernetes, Docker, Terraform, PostgreSQL, Python, Ruby on Rails, TypeScript, OpenTelemetry, Grafana/Prometheus, and GitHub Actions.

• Equity – own a meaningful piece of the company you’re helping build
• Fully paid health coverage through Aetna — we cover 100% of employee premiums
• Top-tier dental and vision coverage through Guardian
• Carrot Fertility Pro – comprehensive fertility and family-forming support
• 12 weeks of paid parental leave
• Unlimited PTO – plus regular 4-day holiday weekends we actually take
• 401(k) through Vestwell
• Paid relocation support – we’ll help you make the move to NYC
• Fully equipped workspace from day one – laptop, monitor, keyboard, and a $200 stipend to personalize your setup
• Team perks – catered Friday lunches, team dinners, and unlimited coffee + snacks featuring products from the brands we work with