Security Engineer

JOB DESCRIPTION:

Velia Multiservices is partnering with a fast-growing startup to find an exceptional Security Engineer ready to build and own security from the ground up.

This is not a traditional security role. This is a chance to become the first dedicated security hire at a company trusted by high-profile enterprise customers including Nvidia, NASA, and Adobe.

We're looking for someone deeply technical, highly proactive, and excited by the challenge of securing systems in a high-growth, high-ownership environment. If you love offensive thinking, moving fast, and solving complex security problems before they become incidents — this role was built for you.

What You'll Own

Conduct deep-dive security reviews across a large Python codebase to identify vulnerabilities and harden systems

Build and maintain automated security scanning across Docker images, PyPI packages, and CI/CD pipelines

Design secure cloud and self-hosted deployment configurations

Lead incident response efforts including vulnerability remediation, root-cause analysis, and post-mortems

Run internal red-team exercises and adversarial testing to strengthen defenses against real-world threats

Establish and scale the company's security foundation as the organization grows

Tech Stack

Python Docker SBOM Snyk Grype Trivy CI/CD Security

What We're Looking For

2+ years of hands-on security engineering experience

Strong understanding of application security, infrastructure security, and vulnerability management

Experience securing modern development pipelines and containerized environments

Ability to operate independently and thrive in fast-moving startup environments

Someone who takes ownership, moves with urgency, and enjoys solving difficult problems

Comfortable working at an intense, high-performance pace (:60 hours/week)

Degree in CS or a related technical field.

Why This Role Stands Out

You won't be joining a large security department. You'll be building the security culture, systems, and strategy from day one alongside an elite engineering team. Your work will directly protect mission-critical infrastructure and globally recognized customers.

Broad, hands-on experience across multiple security domains (e.g. codebase audits, dependency scanning, CI/CD hardening, secure cloud configuration, intrusion detection, incident response, red teaming, threat modeling, secure coding training)