Lead Security Engineer

RemoFirst
Bulgaria
Workplace: RemoteFull timeFunction: CybersecurityExperience: 5+ yearsSkills: ["Communication","Collaboration","Problem-solving","Security","Auditing"]

Lead the security engineering effort at a fast-growing startup, owning identity and access management, cloud and application security, and governance/compliance programs. Architect and implement security controls across Auth0, Okta, AWS, and AI/LLM deployments; drive SOC 2 type II and ISO 27001 programs, and shape a pragmatic secure SDLC while enabling fast product velocity.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
RemoFirst
RemoFirst
4 months ago

Lead Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 11 hours agoStatus: Live

Job Summary

Lead the security engineering effort at a fast-growing startup, owning identity and access management, cloud and application security, and governance/compliance programs. Architect and implement security controls across Auth0, Okta, AWS, and AI/LLM deployments; drive SOC 2 type II and ISO 27001 programs, and shape a pragmatic secure SDLC while enabling fast product velocity.
Location: Bulgaria
Workplace: Remote
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Sr. Manager level

Key Responsibilities

  • •Own Identity & Access Management (Auth0 client-facing and internal Okta) and enforce least privilege across AWS IAM and SCPs
  • •Lead Offensive Security activities including internal pentests and vulnerability scans on Python/Django and Java/Spring Boot services
  • •Oversee Secure SDLC, code review, database hardening (Postgres) and secure messaging (Kafka)
  • •Define AI security guardrails for LLM prompts and model pipelines
  • •Drive Governance, Risk & Compliance tasks (SOC 2 Type II, ISO 27001) and automate compliance (Trust Center in Thoropass)

Key Requirements

  • •5+ years of experience in security engineering
  • •Familiarity with core tech stack: Python/Java with Django, FastAPI & SpringBoot; Kafka & RabbitMQ; PostgreSQL (MongoDB experience helpful)
  • •Experience with IAM (Auth0 and/or Okta), SAML, OIDC, and API-based security
  • •Familiarity with SOC2 and ISO27001 audit cycles; comfortable working with Risk & Compliance teams
  • •Ability to translate ISO27001 requirements for software engineers and enable secure business velocity
Experience:5+ yearsCybersecuritySecurity engineeringCloud security
Skills:CommunicationCollaborationProblem-solvingSecurityAuditing
Certifications:SOC 2ISO 27001
Tech Stack:PythonJavaDjangoFastAPISpringBootKafkaRabbitMQPostgreSQLMongoDBAWSIAMAuth0OktaSAMLOIDCSASTDAST

Company Brief

RemoFirst
Provides global payroll, benefits, and employer-of-record (EOR) services to help companies hire, pay, and manage remote employees and contractors across multiple countries while ensuring local compliance and streamlined HR operations.
Industry: HR Tech
Headquarters: Singapore, Singapore
Website