Engineering
San Francisco
Full-time
$150k – $210k + equity
On-site
Security Engineer
The role
Veltro is SOC 2 Type II certified and handles sensitive product data for thousands of SaaS companies. Security is not an afterthought here. As our Security Engineer you will own our entire security posture, from code review to compliance to incident response.
This is a high-visibility role with direct executive partnership and significant scope to build out the function.
What you'll do
- Lead SOC 2 Type II maintenance and drive scope expansion for future compliance certifications
- Perform threat modeling and security reviews for all new platform features before they ship
- Own vulnerability management, penetration testing coordination, and bug bounty program operations
- Build security tooling and automation for detection, response, and remediation workflows
- Partner with engineering on secure development practices and act as the security reviewer in code review
What we're looking for
- 5+ years in security engineering or application security roles
- Deep knowledge of cloud security on AWS or GCP including IAM, network security, and secrets management
- Hands-on experience managing a SOC 2 or ISO 27001 compliance program
- Strong understanding of OWASP Top 10 and web application security fundamentals
- Clear communicator who can explain security risk and tradeoffs to non-technical stakeholders
Nice to have
- Experience leading security incident response at a SaaS company
- CISSP, CISM, or equivalent professional certification
- Background in bug bounty research or responsible disclosure programs
The interview process
We run a focused, respectful process. No take-home projects that eat your weekend. No trick whiteboard questions. We want to understand how you think and how you work, not test whether you've memorized sorting algorithms.
-
Step 1: 30-minute introductory call with our recruiter
-
Step 2: 45-minute technical conversation with Anika (CTO) on systems design
-
Step 3: 90-minute technical interview with two engineers on the team
-
Step 4: 30-minute conversation with Jordan (CEO) on culture and direction
-
Decision within 5 business days of final interview
apply now