Lead Security Engineer - Pipe

About the Role

Pipe Security's mission is to protect the firm and its users by preventing, detecting, and responding to cyber attacks. We follow philosophies such as Secure by Design, Defense in Depth, and Zero Trust networking. We are a team of software engineers and builders who pride ourselves on first-principles thinking and driving innovation in the security industry.

As a core member of the security team, you will contribute to multiple domains such as Cloud Security, Application Security, Detection & Response, and Privacy. You will write code, build systems, and work cross-functionally across Pipe to support our mission. You will partner with our IT team to set appropriate security standards for a compliant organization, collaborate with Infrastructure to consistently meet those standards, and continually maintain a strong security posture and culture.

Responsibilities

• Review and help design robust security standards and monitoring.
• Maintain and improve our policy-as-code platform to enable rapid detection and response.
• Work closely with the Infrastructure team to ensure cloud-based deployments have proper monitoring and adhere to policies.
• Manage SOC 2 audits, set high standards for compliant software and processes, and ensure adherence.
• Participate in on-call rotation to support critical security issues.
• Own the vulnerability disclosure program and triage inbound reports to security@.
• Run periodic tabletop exercises and incident response drills.
• Maintain security policies and lead recurring reviews (e.g., firewall changes, security reviews).
• Lead responses to partner and customer security questionnaires.
• Maintain the security risk register, track remediation, and produce periodic metrics for leadership.

Tech Stack

• Frontend: TypeScript, React, Next.js
• Backend: Go, PostgreSQL, BigQuery
• Data: BigQuery, SQLMesh, Python
• Infrastructure: Kubernetes, Pulumi, Buildkite, Google Cloud Platform (GCP)
• Security: Panther, Wiz, Vanta

Technical Qualifications

• Hands-on experience with cloud platforms (GCP preferred) and Kubernetes security.
• Proficiency in at least one of Go, Python, or TypeScript to build and maintain internal tooling.
• Experience owning SOC 2 (or equivalent) compliance programs end-to-end, including evidence collection, auditor management, and remediation.
• Experience running incident response, including on-call, post-mortems, and tabletop exercises.
• Experience managing vendor risk reviews and responding to customer security questionnaires.
• Strong written communication skills to interface with auditors, customers, partners, and engineers.

Success Factors

• Desire to join a remote-first startup and make a real impact.
• Hold yourself and your teammates to high standards.
• Strong technical foundation paired with a focus on customer success.
• End-to-end ownership and passion for cross-functional collaboration.

Benefits & Compensation

• Salary Range: $150,000 – $220,000 USD base salary (narrowed based on experience and location)
• Top-tier equipment provided
• Flexible vacation and work hours for a healthy work-life balance
• Excellent health, dental, and vision insurance
• Generous parental leave for all growing families, regardless of gender