[Hiring] Founding Security Engineer @Map Ssg

Role Description

This is the company’s first dedicated security hire. You will define and build the company’s security program from scratch, working directly with a security-minded co-founder. This role spans product security, application security, corporate security, compliance, incident response, and detection. Over time, this person may build and lead the security function.

• Own the company’s security posture across product, infrastructure, and internal systems
• Lead security reviews, threat modeling, and secure design work
• Build foundational security systems such as secrets management, audit logging, vulnerability management, and certificate infrastructure
• Drive compliance programs such as SOC 2, ISO 27001, GDPR, and CCPA
• Define incident response processes and detection capabilities
• Partner closely with engineering to embed security into product development
• Help shape security culture across a small, high-caliber team

Qualifications

• 5+ years of security engineering experience
• Strong application security background
• Experience with secure SDLC, threat modeling, vulnerability management, and security architecture
• Experience contributing to or running security programs
• Compliance experience, ideally SOC 2, ISO 27001, GDPR, or similar
• Backend or systems engineering fluency; Go experience is a plus
• Ability to operate with high ownership in an early-stage environment
• Low-ego, collaborative mindset and willingness to wear multiple hats

Nice to Have

• First or second security hire experience at a startup
• Detection engineering experience
• Identity, access management, enterprise IT, or security software background
• Kubernetes, GCP, cloud security, or infrastructure security experience
• Published security research, talks, or open-source security work