Fieldguide · 10 hours ago
Lead Security Engineer
United States
Full-time
Remote
Lead/Staff
$210K/yr - $260K/yr
8+ years expFieldguide is a company focused on automating and streamlining the work of assurance and audit practitioners in cybersecurity, privacy, and financial audit. They are seeking a Lead Security Engineer to build and own their information security program, with a primary focus on securing code, APIs, and product architecture, while collaborating closely with Engineering, Product, and Compliance teams.
AccountingAgentic AIArtificial Intelligence (AI)Cyber SecurityDocument ManagementFinTech
Responsibilities
Lead secure design reviews, threat modeling, and security-focused code reviews across the product and platform
Ensure security is ingrained into the SDLC so that the secure path is the easy path for engineers with secure-by-default libraries, patterns, and guardrails
Own authentication, authorization, API security, and data protection architecture for a multi-tenant SaaS platform
Architect and maintain security tooling integrated into CI/CD pipelines: static analysis, dependency scanning, secrets detection
Evaluate and mitigate risks specific to Fieldguide's AI Agents — prompt injection, data leakage through LLM contexts, unauthorized tool use, and unintended agent behaviors
Partner with Agent and Platform teams to define security boundaries for agent execution: sandboxing, least-privilege tool access, and runtime policy enforcement
Contribute to Fieldguide's approach to responsible AI, ensuring customer data is protected throughout the AI pipeline from ingestion through inference
Build and run Fieldguide’s vulnerability management program: scanning, triage, SLA-driven remediation tracking, and engineering coordination
Ensure visibility into vulnerability posture across application code, dependencies, and infrastructure
Manage external penetration testing engagements, bug bounty programs, and coordinate remediation of findings
Partner with infrastructure engineering to review and improve cloud security across our AWS environment: IAM, network architecture, secrets management, and logging
Ensure detection and monitoring capabilities are in place for security-relevant events via SIEM
Establish runbooks, communication protocols, and post-incident review practices in coordination with a 24/7 MDR team
Collaborate with engineers on incident response processes and playbooks
Partner with Compliance to ensure technical controls satisfy framework requirements (SOC 2, ISO 27001, ISO 42001, FedRAMP)
Help GTM teams articulate Fieldguide’s security posture to enterprise customers
Start as an individual contributor, but as the security program matures, hire and mentor security engineers. Set the culture and standards for how security operates at Fieldguide
Qualification
Required
8+ years in security with a primary background in application security, product security, or security-focused software engineering
Track record of building or significantly maturing a security program, ideally at a growth-stage SaaS company
Strong programming skills with demonstrated experience writing production software
Familiarity with AWS security services and patterns: IAM, VPC, CloudTrail, KMS. You can identify misconfigurations and security gaps, even if you're not the one writing Terraform
Experience with threat modeling methodologies and secure design review processes
Experience managing external penetration tests and coordinating remediation
Familiarity with AI/LLM security considerations and emerging risks in agentic AI systems is a plus
Experience supporting compliance frameworks (SOC 2, ISO 27001, NIST, FedRAMP) from the technical controls side is a plus
AppSec-first mindset: Your core strength is application security. You think about auth flows, data isolation, injection vectors, and API boundaries instinctively. You've found and fixed real vulnerabilities in production systems
AI-native instincts: You have a practical thesis on using LLMs, agents, and automation to multiply the security team's impact. You're excited to use AI for tasks like automated code review triage, vulnerability prioritization, security questionnaire drafting, and pattern detection so the security function scales through leverage, not just headcount
Engineer who does security: You write code, read code, and think about security through an engineering lens. You're comfortable contributing to production systems in Python and TypeScript when needed
Pragmatic risk thinker: You can look at a system design and quickly identify where the risks are, then prioritize based on actual impact rather than theoretical severity
Strong communicator: You translate security risks into business terms, influence engineering teams without direct authority, and present to enterprise customers with confidence
Comfortable with ambiguity: You're owning a lot at a growth-stage company and will not have playbooks for everything. You're energized by that
Preferred
Familiarity with AI/LLM security considerations and emerging risks in agentic AI systems is a plus
Experience supporting compliance frameworks (SOC 2, ISO 27001, NIST, FedRAMP) from the technical controls side is a plus
Benefits
Competitive compensation packages with meaningful ownership
Flexible PTO
401k
Wellness benefits
Technology & Work from Home reimbursement
Flexible work schedules
Company
Fieldguide
Agentic AI for Audit and Advisory.
51-200 employees
H1B Sponsorship
Fieldguide has a track record of offering H1B sponsorships. Please note that this does not
guarantee sponsorship for this specific role. Below presents additional info for your
reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (4)
Funding
Current Stage
Growth StageTotal Funding
$125MKey Investors
Goldman Sachs AlternativesKPMGBessemer Venture Partners
2026-02-02Series C· $75M
2025-10-23Corporate Round
2024-03-26Series B· $30M
Leadership Team
Jin Chang
CEO, Co-Founder
Chris Szymansky
Co-Founder / CTO
Recent News
2026-02-06
Venture Capital Firms
2026-02-03
thesaasnews.com
2026-02-03
Company data provided by crunchbase