Lead Security Engineer
Core
Lead security for a $150M+ marketplace platform handling payments, customer data, and AI-agent authored code, transitioning from informal practices to a deliberate, instrumented security function.
Role type
Lead Security Engineer (AppSec, Cloud, Compliance, Detection)
Builds
Security controls, automated scanning pipelines, compliance frameworks, and incident response capabilities for a multi-brand home services platform.
Domain
Fintech / Marketplace / Cloud Security / AI Security
Required skills
Application security, Cloud infrastructure security (AWS), Compliance (PCI, SOC 2, LGPD), Detection & response, AI security engineering, Threat modeling, Secure SDLC, Vulnerability management, Security automation, Team leadership
Preferred skills
Experience leading security teams, AI tooling expertise, Cross-functional partnership
Technologies
AWS, EKS, Kubernetes, Datadog, Sentry, PHP/Laravel, TypeScript/React, SAST, Secret scanning, Dependency scanning
Responsibilities
Design and implement threat models and risk registers for critical paths, Build and maintain CI/CD security gates (SAST, secret/dependency scanning) optimized for AI-generated code, Lead compliance initiatives (PCI scoping, SOC 2, LGPD readiness), Strengthen detection coverage and incident response runbooks, Establish security standards and playbooks to scale the function, Partner with delivery teams to integrate security into the SDLC
Seniority
Senior, hands-on IC with leadership trajectory