About the role

Lead Security Engineer at Pipe Technologies enhancing cybersecurity through code and systems building in a remote-first culture.

Responsibilities

Review and help design robust security standards and monitoring
Maintain and improve our policy-as-code platform to enable rapid detection and response
Work closely with our Infrastructure team to ensure cloud-based deployments have proper monitoring and adhere to our policies
Manage SOC II audits, set a high standard for compliant software and processes, and ensure we consistently meet those standards
Participate in on-call rotation to support critical security issues
Own the vulnerability disclosure program and triage inbound reports to security@
Run periodic tabletop exercises and incident response drills
Maintain security policies and lead recurring reviews (e.g., firewall changes, security reviews)
Lead responses to partner and customer security questionnaires
Maintain the security risk register, track remediation, and produce periodic security metrics for leadership

Hands-on experience with cloud platforms (GCP preferred) and Kubernetes security
Proficiency in at least one of Go, Python, or TypeScript - enough to build and maintain internal tooling
Experience owning SOC 2 (or equivalent) compliance programs end-to-end, including evidence collection, auditor management, and remediation
Experience running incident response, including on-call, post-mortems, and tabletop exercises
Experience managing vendor risk reviews and responding to customer security questionnaires
Strong written communication - this role interfaces with auditors, customers, partners, and engineers

The best equipment to help you do your job
Flexible vacation and work hours - we believe in a healthy work-life balance (really!)
Excellent health, dental, and vision insurance
Generous parental leave for anyone growing their family, regardless of gender
Great colleagues - we value a culture of authenticity, humility, and excellence