Founding Security Engineer
BoomRent reporting company
Austin, United StatesSenior
Starting Line
Clocktower Ventures
Company Ventures
Gilgamesh Ventures
William Hockey
Zach Perret
Software Engineering
About the role
TL;DR
Build and mature Boom's security posture as a Founding Security Engineer.
- •We're expanding our engineering team to meet the growing demands of our B2B partners and B2C users.
- •As we move from Seed to Series A and beyond, we're hiring our Founding Security Engineer to harden our platform, mature our security posture, and partner with product engineering and infrastructure teams to bake security into how we build.
- •Key Responsibilities Own our application and cloud security posture across our infrastructure and full stack product Run our SOC 2 certification effort, interface with vendors for pen testing, and prep us for the next compliance lifts Build the secure SDLC: threat modeling, security-sensitive code review, SAST/DAST/SCA tooling, secrets management, and dependency hygiene Lead incident response and vulnerability management.
- •Triage, contain, remediate, and run blameless postmortems Partner with engineering on identity, access, and data handling for PII, credit, and payment data so secure-by-default is the easy path Requirements 5+ years in security engineering or application security with hands-on web development experience Working knowledge of SOC 2 (bonus for ISO 27001, HIPAA, PCI, GLBA/FCRA) Strong grasp of common attack classes (OWASP Top 10, auth/session, SSRF, deserialization, supply chain) Backend-leaning full stack on Ruby (Grape and Sequel) with React/Next.js and TypeScript on the frontend Strong communicator who can explain risk to non-security audiences and push back without slowing the business
Required skills
Ruby on RailsReactNext.jsTypeScriptAWSOAuthJWTTerraformCI/CDGitLinuxSOC 2OWASPPenetration Testing
Nice-to-have skills
HIPAA
Domain expertise
fintech
Benefits & perks
Competitive salary with stock options, Full healthcare coverage, Paid Time Off, Company-issued laptop/MacBook, Company-sponsored training & development, Regular off-sites, retreats, and other company-sponsored events and travel opportunities
Tech stack
Ruby on RailsReactNext.jsTypeScriptAWSOAuthJWTTerraformCI/CDGitLinux