> Markdown version of [/jobs/ext/1240009-senior-security-engineer](https://www.wearedevelopers.com/jobs/ext/1240009-senior-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Security Engineer

- **Company:** Nectar Social
- **Location:** Palo Alto, CA, United States
- **Experience:** Expert
- **Salary:** $200,000.0 - $300,000.0
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Amazon Web Services, Software as a Service, Cloud Computing Security, Customer Data Management, Key Management, PostgreSQL, Software Vulnerability Management, AI Infrastructure, Pulumi, Vertica
- **Published:** July 11, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=e9aeb9c491590a28

## About the Role

5+ years in security engineering, application/product security, or a related role at a software company

 * Strong application and cloud security fundamentals; able to reason about the security of real production systems and AI workloads, not just policy
 * Hands-on experience leading or operating a compliance program (SOC 2, ISO 27001, or similar) end to end
 * Solid programming skills to build security tooling and automation, and to work credibly alongside engineers
 * Comfortable operating in fast-moving startup environments with high ownership and autonomy

Bonus Points

 * Experience establishing a security and compliance function at an early-stage or rapidly scaling SaaS company
 * Familiarity with AWS, Pulumi, Postgres, ClickHouse, Turbopuffer, or Temporal

## Description

We're looking for a Security Engineer to own security across our enterprise SaaS platform - from the design of our deployed applications to the compliance programs that earn the trust of large brands. We handle sensitive social and customer data at scale, and our customers expect enterprise-grade security and rigorous proof of it.

As the first Security engineer, you'll have outsized ownership. You'll secure the products we ship, lead the compliance initiatives that unlock enterprise deals, and build the security foundations the rest of the engineering team relies on as we grow., Own the security of our deployed applications, including threat modeling, secure design reviews, and finding and fixing vulnerabilities across our services and AI infrastructure

 * Lead new compliance initiatives (SOC 2, and frameworks like ISO 27001, GDPR, and CCPA as we scale), establishing the controls, policies, and evidence to back them
 * Own the security side of the sales cycle: complete customer security questionnaires, support enterprise security reviews, and act as our expert in vendor assessments
 * Build and run our vulnerability management, secrets management, identity and access, and security monitoring practices
 * Manage third-party risk and our penetration-testing program


## Related Videos

- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [Why segmenting your infrastructure into tiers makes your infrastructure design better](https://www.wearedevelopers.com/videos/1960-why-segmenting-your-infrastructure-into-tiers-makes-your-infrastructure-design-better)
- [Optimizing Discovery: PostgreSQL's Role in Transforming GetYourGuide's Search](https://www.wearedevelopers.com/videos/1647-optimizing-discovery-postgresql-s-role-in-transforming-getyourguide-s-search)
- [Unleashing Potential Across Teams: The Power of Infrastructure as Code](https://www.wearedevelopers.com/videos/930-unleashing-potential-across-teams-the-power-of-infrastructure-as-code)
- [Discover the open source trio you didn’t expect: .NET and PostgreSQL on Linux](https://www.wearedevelopers.com/videos/2042-discover-the-open-source-trio-you-didn-t-expect-net-and-postgresql-on-linux)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)