Note: The job is a remote job and is open to candidates in USA. Xcede is partnering with a high-growth, venture-backed Data & AI infrastructure company that pioneered a Composable Customer Data Platform and expanded into AI Decisioning. The Lead Application Security Engineer will be the first dedicated security hire, taking end-to-end ownership of application security and building security capabilities from the ground up. The role focuses on hands-on engineering across multi-tenant security, authorization, cloud architecture, APIs, threat modeling, and data privacy.

Responsibilities

• This person will become the first dedicated security hire and take end-to-end ownership of application security as the engineering organization scales from roughly 70 to 140+ engineers
• Multi-tenant isolation across a platform running ~1M data syncs per day and ingesting 100K+ events/sec
• Designing sophisticated authorization & access-control models for multi-team and multi-brand environments
• Security architecture, threat modeling & product hardening
• Securing high-throughput, internet-facing APIs and improving rate limiting and abuse detection
• Designing and improving compute isolation
• Securing a multi-region, multi-cloud architecture spanning AWS, Azure & GCP
• Supporting data residency and privacy requirements for a global customer base

Skills

• You should be comfortable reading application code, threat modeling distributed systems and shipping production fixes, with strong experience across areas such as multi-tenant security, authorization, cloud security and data infrastructure
• Ideally, you've previously been one of the first 1–3 security hires at a SaaS or data infrastructure company and have experience building security capabilities rather than simply operating an established program

Benefits

• Equity
• Remote — US & Canada
• Visa sponsorship available for certain transfers/visa types

Company Overview