> Markdown version of [/jobs/ext/4629692-founding-security-engineer](https://www.wearedevelopers.com/jobs/ext/4629692-founding-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Founding Security Engineer

- **Company:** PROMISE LLC
- **Location:** Washington, DC, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Kubernetes Security, Artificial Intelligence, Audit Trail, Cloud Computing, Cloud Computing Security, Github, Python (Programming Language), Next.js, Software Vulnerability Management, Web Applications, Scripting, Software Security, Kubernetes, Terraform
- **Published:** November 7, 2026
- **Apply:** https://www.juju.com/job/28_25197_29403a624f6576e919f1343dfa458111

## About the Role

* 5-10 years of experience, with meaningful time focusing on security.
 * Creative and collaborative problem solving, with an emphasis on enablement not obstruction.
 * Strong understanding of cloud security + networking (GCP preferred).
 * Comfortable reading code and shipping fixes; Python scripting strongly preferred.
 * Experience operating security tooling (endpoint/EDR, MDM, audit logging/alerting, CSPM).
 * Familiarity with GitHub, Terraform, and CI/CD security fundamentals., * WAFs / web app security controls
 * Threat modeling experience
 * Deep Kubernetes hardening/runtime experience

## Description

Promise is looking for a Founding Security Engineer to accelerate our business. This role requires you to work closely with builders of varying technical depth, enabling our business's ambitious goals while guaranteeing the high standard of security that our clients expect., * Partner closely with engineering to embed security best practices into product design and technical implementation, enabling the organization to move quickly without compromising on security.

 * Build and run detection: write, tune, and respond to Python-based rules to catch anomalous activity and improve signal-to-noise.
 * Partner with our Infrastructure team to secure GCP + cloud networking and improve Kubernetes security.
 * Strengthen application security and help make pragmatic upgrades (e.g., Next.js, dependencies).
 * Improve security through code + automation (guardrails, checks, remediation workflows).
 * Own vulnerability management end-to-end: identify, prioritize, and drive fixes to closure in coordination with codeowners.
 * Build infrastructure and processes to increase company velocity while upholding a high security standard.
 * Develop technical and policy frameworks to guide ambitious and safe AI adoption company-wide.