7 часов назад
Security Lead
80 000 - 100 000$
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Security Lead (AppSec/AWS/AI): Building and leading LawnStarter's security function across its PHP/Laravel and TypeScript/React platform, AWS infrastructure, payment flows, customer data, and compliance posture with an accent on application security, cloud security, and AI-agent-authored code. Focus on threat modeling, automated security controls, PCI/SOC 2/LGPD readiness, detection and response, and building the foundation for a future security team.
Location: Remote; listed locations include Brazil, Mexico, and Colombia
Salary: $80,000–$100,000 USD annually
Company
operates an on-demand marketplace for lawn care and outdoor services and is expanding into a broader home-services platform across three brands.
What you will do
- Lead security across the PHP/Laravel and TypeScript/React application, AWS infrastructure, payment systems, customer data, and compliance program.
- Build application-security practices including threat modeling, secure SDLC, code and design reviews, SAST, secret scanning, dependency scanning, and vulnerability management.
- Strengthen AWS and Kubernetes security, including IAM, network controls, encryption, secrets management, and EKS hardening.
- Map PCI scope, drive SOC 2 and LGPD readiness, manage vendor risk, and support customer and auditor security questionnaires.
- Improve detection and response using Datadog, Sentry, and AWS signals; establish and rehearse incident runbooks and baseline MTTD/MTTR.
- Define security controls for AI-agent-authored code and create the standards, playbooks, roadmap, and hiring plan for a future security team.
Requirements
- Hands-on expertise across at least three of application security, cloud security, compliance, and incident response.
- Experience building and operating technical security controls rather than focusing only on policy or audits.
- Ability to work across application security, AWS, compliance, data protection, detection, and response.
- Pragmatic risk prioritization skills, with a focus on reducing material risk while maintaining delivery speed.
- Daily use of AI tools for security work and comfort securing AI-agent-authored code.
- Strong collaboration with delivery teams and Cloud & DevOps, with the ability to grow into leading a small security team within approximately 12–18 months.
Culture & Benefits
- Fully remote role with a US-distributed engineering team.
- Asynchronous work and autonomy over the working environment.
- Opportunity to define the security function and shape its future team.
- Claude Code and the engineering team's AI agent stack are provided for security work.
- Top-of-market cash compensation for the lead scope and technical leadership expected.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →
Похожие вакансии
20 часов назад
Lead Security Engineer
75 000 - 100 000GBP
4 дня назад
DevSecOps Professional (AWS)
130 000 - 160 000$
4 дня назад
Cybersecurity Engineer (DevSecOps) (AI)
101 156 - 199 035$
7 дней назад
Senior Security Engineer, Product Security
146 000 - 185 000$
17 часов назад
Application Security Engineer
90 000 - 130 000$
17 часов назад