JOB DESCRIPTION:
Velia Multiservices is partnering with a fast-growing startup to find an exceptional Security Engineer ready to build and own security from the ground up.
This is not a traditional security role. This is a chance to become the first dedicated security hire at a company trusted by high-profile enterprise customers including Nvidia, NASA, and Adobe.
We're looking for someone deeply technical, highly proactive, and excited by the challenge of securing systems in a high-growth, high-ownership environment. If you love offensive thinking, moving fast, and solving complex security problems before they become incidents — this role was built for you.
What You'll Own
Conduct deep-dive security reviews across a large Python codebase to identify vulnerabilities and harden systems
Build and maintain automated security scanning across Docker images, PyPI packages, and CI/CD pipelines
Design secure cloud and self-hosted deployment configurations
Lead incident response efforts including vulnerability remediation, root-cause analysis, and post-mortems
Run internal red-team exercises and adversarial testing to strengthen defenses against real-world threats
Establish and scale the company's security foundation as the organization grows
Tech Stack
Python Docker SBOM Snyk Grype Trivy CI/CD Security
What We're Looking For
2+ years of hands-on security engineering experience
Strong understanding of application security, infrastructure security, and vulnerability management
Experience securing modern development pipelines and containerized environments
Ability to operate independently and thrive in fast-moving startup environments
Someone who takes ownership, moves with urgency, and enjoys solving difficult problems
Comfortable working at an intense, high-performance pace (~60 hours/week)
Degree in CS or a related technical field.
Why This Role Stands Out
You won't be joining a large security department. You'll be building the security culture, systems, and strategy from day one alongside an elite engineering team. Your work will directly protect mission-critical infrastructure and globally recognized customers.
Broad, hands-on experience across multiple security domains (e.g. codebase audits, dependency scanning, CI/CD hardening, secure cloud configuration, intrusion detection, incident response, red teaming, threat modeling, secure coding training)