← All roles

Lead Security Engineer

Fieldguide
Apply on company site
Hybrid (San Francisco, CA)$210k - $260kFull-timePosted 7mo ago

About the role

Lead Security Engineer at Fieldguide, a vertical AI platform for audit and advisory firms. Remote-first SaaS startup based in San Francisco, CA. Responsible for building and owning Fieldguide’s information security program across application, AI, infrastructure, and security operations to protect multi-tenant SaaS products and customer data.

Responsibilities

  • Lead secure design reviews, threat modeling, and security-focused code reviews across the product and platform.
  • Ensure security is ingrained into the SDLC with secure-by-default libraries, patterns, and guardrails.
  • Own authentication, authorization, API security, and data protection architecture for a multi-tenant SaaS platform.
  • Architect and maintain security tooling integrated into CI/CD pipelines: static analysis, dependency scanning, secrets detection.
  • Evaluate and mitigate risks specific to Fieldguide's AI Agents — prompt injection, data leakage through LLM contexts, unauthorized tool use, and unintended agent behaviors.
  • Partner with Agent and Platform teams to define security boundaries for agent execution: sandboxing, least-privilege tool access, and runtime policy enforcement.
  • Contribute to Fieldguide's approach to responsible AI, ensuring customer data is protected throughout the AI pipeline from ingestion through inference.
  • Build and run Fieldguide’s vulnerability management program: scanning, triage, SLA-driven remediation tracking, and engineering coordination.
  • Ensure visibility into vulnerability posture across application code, dependencies, and infrastructure.
  • Manage external penetration testing engagements, bug bounty programs, and coordinate remediation of findings.
  • Partner with infrastructure engineering to review and improve cloud security across our AWS environment: IAM, network architecture, secrets management, and logging.
  • Establish runbooks, communication protocols, and post-incident review practices in coordination with a 24/7 MDR team.
  • Collaborate with engineers on incident response processes and playbooks.
  • Partner with Compliance to ensure technical controls satisfy framework requirements (SOC 2, ISO 27001, ISO 42001, FedRAMP).
  • Help GTM teams articulate Fieldguide’s security posture to enterprise customers.
  • Start as an individual contributor, then hire and mentor security engineers; set culture and standards for security at Fieldguide.

Qualifications

  • 8+ years in security with a primary background in application security, product security, or security-focused software engineering.
  • Track record of building or significantly maturing a security program, ideally at a growth-stage SaaS company.
  • Strong programming skills with demonstrated experience writing production software.
  • Familiarity with AWS security services and patterns: IAM, VPC, CloudTrail, KMS. Ability to identify misconfigurations and security gaps even if not Terraform author.
  • Experience with threat modeling methodologies and secure design review processes.
  • Experience managing external penetration tests and coordinating remediation.
  • Familiarity with AI/LLM security considerations and emerging risks in agentic AI systems is a plus.
  • Experience supporting compliance frameworks (SOC 2, ISO 27001, NIST, FedRAMP) from the technical controls side is a plus.

Skills

Required:Application securityAI securitySecure design reviewsCI/CD security toolingCloud security (AWS)

Benefits

  • Competitive compensation packages with meaningful ownership
  • Flexible PTO
  • 401k
  • Wellness benefits
  • Technology & Work from Home reimbursement
  • Flexible work schedules
Last updated Oct 7, 2026. Interested? Apply on the company site.
Fieldguide logo

About Fieldguide

Vertical AI for Audit & Advisory Firms

‍Fieldguide is a vertical AI platform for modern assurance and advisory firms that digitizes the end-to-end engagement workflow on a single platform. Built by former Big Four practitioners and experienced technology leaders, Fieldguide is trusted by top CPA firms to improve margins, win new business, and build stronger client relationships. We’re based in San Francisco, CA, but built as a remote-first company that enables you to do your best work from anywhere. We're backed by top investors including Bessemer Venture Partners, 8VC, Y Combinator, Floodgate, Elad Gil, Justin Kan, Qasar Younis, Eric Ries, and more.

artificial-intelligenceb2bworkflow-automationproductivity
Company profileWebsite

More open roles at Fieldguide