Security Engineer

JOB DESCRIPTION:Velia Multiservices is partnering with a fast-growing startup to find an exceptional Security Engineer ready to build and own security from the ground up.This is not a traditional security role. This is a chance to become the first dedicated security hire at a company trusted by high-profile enterprise customers including Nvidia, NASA, and Adobe.We're looking for someone deeply technical, highly proactive, and excited by the challenge of securing systems in a high-growth, high-ownership environment. If you love offensive thinking, moving fast, and solving complex security problems before they become incidents — this role was built for you.What You'll OwnConduct deep-dive security reviews across a large Python codebase to identify vulnerabilities and harden systemsBuild and maintain automated security scanning across Docker images, PyPI packages, and CI/CD pipelinesDesign secure cloud and self-hosted deployment configurationsLead incident response efforts including vulnerability remediation, root-cause analysis, and post-mortemsRun internal red-team exercises and adversarial testing to strengthen defenses against real-world threatsEstablish and scale the company's security foundation as the organization growsTech StackPython Docker SBOM Snyk Grype Trivy CI/CD SecurityWhat We're Looking For2+ years of hands-on security engineering experienceStrong understanding of application security, infrastructure security, and vulnerability managementExperience securing modern development pipelines and containerized environmentsAbility to operate independently and thrive in fast-moving startup environmentsSomeone who takes ownership, moves with urgency, and enjoys solving difficult problemsComfortable working at an intense, high-performance pace (:60 hours/week)Degree in CS or a related technical field.Why This Role Stands OutYou won't be joining a large security department. You'll be building the security culture, systems, and strategy from day one alongside an elite engineering team. Your work will directly protect mission-critical infrastructure and globally recognized customers.Broad, hands-on experience across multiple security domains (e.g. codebase audits, dependency scanning, CI/CD hardening, secure cloud configuration, intrusion detection, incident response, red teaming, threat modeling, secure coding training)