Senior/Staff Security Engineer

Headcount: 1

Job Details

• Experience: 4+ years
• Salary: Not specified
• Equity: 1%–2%
• Visa sponsorship: H-1B, O-1, OPT
• Employment type: Full-time
• Work type: In person
• Location: San Francisco office, Monday to Friday

Benefits & Perks

• Meals in office
• Health insurance
• Unlimited PTO

About This Role

You will own the security posture of Init and its product end to end: application, cloud, network, and the agent itself. This system has limited prior art, so the work is genuinely novel: leading secure design reviews and threat modeling for an agent that holds a governed identity, requests scoped access, and acts with human approval. This is an in-person role at our San Francisco office, Monday to Friday.

You’ll build security primitives into the product rather than around it: full per-customer isolation, credentials the agent uses but never sees, approval gates on write actions, a customer-set dial on what the agent may see and do, and an audit trail complete enough to replay any run. You’ll own the written security architecture account that technical buyers read before deploying, run the external validation path (pen tests, compliance frameworks, enterprise security reviews), own incident readiness with a breach-notification commitment measured in hours, and push scanning, secret detection, and compliance checks into CI. You’ll also set the internal security bar for how the company handles customer credentials.

What You’ll Own

• The end-to-end security posture: application, cloud, network, and the agent itself
• Secure design reviews and threat modeling for a governed-identity agent with scoped, approval-gated access
• In-product security primitives: per-customer isolation, credentials the agent never sees, write-action approval gates, a customer-controlled capability dial, and replayable audit trails
• The written security architecture account that gates enterprise deployments and closes technical buyers
• External validation: pen testing by a respected firm, required compliance frameworks, and enterprise security reviews
• Incident readiness and response, with breach notification measured in hours
• Continuous cloud/IAM auditing and security-as-a-pipeline-step in CI
• The internal bar for credential handling, data egress, and endpoint policy

Requirements

• Senior/Staff-level experience in application and infrastructure security
• Ability to code in Python, Go, Rust, or TypeScript
• Experience with threat modeling and identity/workload IAM