Staff Software Engineer

About the role

At Flow Engineering, we are at the forefront of developing an AI-driven platform that empowers hardware teams to effectively manage intricate system requirements. We are seeking a dedicated Staff Software Engineer to take on the pivotal role of our first security hire. This position is crucial for establishing and upholding the security framework of our platform, which caters to clients in the defense and aerospace sectors. You will play a key role in defining the security architecture and ensuring compliance with industry standards for our innovative AI-native system.

Key facts

What you'll do

• Lead the design and implementation of the security architecture across our platform, which includes conducting threat modeling, performing secure design reviews, and establishing development standards.
• Enhance the security posture of our entire technology stack, focusing on application security, cloud infrastructure (including identity management, network security, and secrets management), tenant isolation, and safeguarding data.
• Drive the organization towards achieving SOC 2 certification while preparing for additional certifications required by our defense and aerospace clients, such as export control regulations and ITAR compliance.
• Fortify our AI systems against various vulnerabilities, including prompt injection, data leakage, and unauthorized actions by agents, while creating necessary safeguards.
• Create and implement vital security tools for detection, monitoring, and vulnerability management, ensuring seamless integration into our CI/CD pipelines.
• Develop and oversee incident response protocols, managing the process from initial detection through to post-incident analysis.
• Work closely with sales and product teams to navigate security assessments and foster trust with our customers.
• Collaborate with cross-functional teams to promote a culture of security awareness and best practices throughout the organization.
• Stay updated on the latest security trends and threats, continuously evolving our security strategies to address emerging challenges.
• Mentor junior engineers and contribute to the overall growth of the engineering team by sharing knowledge and best practices in security.

Requirements

• Minimum of 8 years of experience in developing production software, with a strong focus on managing secure services at scale within a cloud environment.
• Deep expertise in application and cloud security, particularly with platforms such as AWS, GCP, or Azure, emphasizing identity and access management, secrets management, network security, and data protection.
• Proven track record of owning security initiatives in regulated or high-trust environments, with direct involvement in the implementation of SOC 2 standards.
• Comprehensive understanding of threat modeling, secure architecture principles, and incident response methodologies.
• Experience in securing AI systems or large language models (LLMs) is highly desirable.
• Ability to take charge of security initiatives in a startup setting, demonstrating independence in setting strategic priorities and executing plans.

Nice to have

• Familiarity with export control regulations, ITAR, or FedRAMP compliance would be advantageous.
• Experience working in a fast-paced startup environment, adapting quickly to changing priorities and challenges.
• Knowledge of security frameworks and best practices relevant to the defense and aerospace industries.

Skills & tools

• Proficient in TypeScript, Node.js, and Python for software development.
• Experience with LLM APIs and orchestration libraries for building secure applications.
• Familiarity with PostgreSQL for database management.
• Proficient in cloud services such as AWS, GCP, and Azure to enhance security measures.

Practical notes

• We offer a competitive salary along with significant equity options to our employees.
• Comprehensive health, dental, and vision benefits are included in our compensation package.
• The company promotes a flexible time-off policy, encouraging work-life balance.
• We support continuous learning and experimentation within the AI ecosystem, providing opportunities for professional growth and development.

Join us at Flow Engineering, where your expertise in security will play a vital role in shaping the future of our AI-powered platform, ensuring that we meet the highest standards of security and compliance for our esteemed clients in the defense and aerospace sectors.