Join Fieldguide: Senior Software Security Enginee
At Fieldguide, we're not just building software; we're forging a new standard of trust for global commerce and capital markets. By automating the intricate world of assurance and audit – spanning cybersecurity, privacy, and finance – we empower the professionals who underpin business integrity. We're a remote-first company based in San Francisco, CA, proudly backed by industry giants like Goldman Sachs Alternatives, Bessemer Venture Partners, 8VC, Floodgate, and Y Combinator. Our platform is trusted by over 50 of the top 100 accounting and consulting firms, making a tangible impact on mission-critical work.
Your Mission: Build the Future of Trust with Us
Our customers entrust us with their most sensitive audit and compliance data. This sacred trust isn't just a promise; it's engineered into every layer of our product. As a result, our own security practices are paramount to our success and our promise. The Information Security & Compliance team is the guardian of Fieldguide's systems, earning and maintaining that trust every single day.
As one of our foundational security hires, you'll be instrumental in shaping our security function from the ground up. As a Senior Software Security Engineer, your core mission will be to make the secure path the easy path for every Fieldguide engineer. Your expertise will span secure design, cutting-edge identity and secrets management, robust infrastructure security, and pioneering agentic AI security. We operate with an agile mindset, prioritizing around the biggest risks, which means your focus will evolve, offering constant new challenges and growth opportunities.
You'll report directly to our Lead Security Engineer and collaborate closely with our dynamic Product and Platform teams, embedding security deeply into our development lifecycle.
Our Modern Tech Stack Cloud & Infra: AWS, Kubernetes, Terraform What You'll Own & Drive Proactive Security Partnership: Collaborate directly with engineering teams to identify and mitigate significant risks early in the development lifecycle, building secure frameworks and libraries that make control adoption intuitive and efficient. Who You Are: An Engineering-First Security Leader You bring 5+ years of hands-on software engineering experience, specifically building and maintaining security-relevant systems in production environments. Bonus Points Experience with developer security tooling such as SAST, dependency scanning, or secure build infrastructure. More About Fieldguide: Our Values Fearless: We inspire and break down seemingly impossible walls. Unlocking Your Potential: Our Benefits Competitive compensation packages with meaningful ownership in a growing company.
Dive into a compelling technical environment designed for scale, security, and innovation:
Application: Python, TypeScript, GraphQL
AI: LLM gateway and agent orchestration across multiple model providers
Security Tooling: Socket, Chainguard, GitHub Advanced Security, frontier cyber models
This role offers a unique opportunity to make a profound impact from day one. You will:
Next-Gen Identity & Secrets: Design, build, and maintain our critical identity and secrets management systems, including advanced credential issuance, automated rotation, and sophisticated workload authentication. Lead our transition towards short-lived, workload-based identity across our AWS and Kubernetes environments.
Cloud Security Fortification: Harden our cloud security posture through continuous improvement, contributing to infrastructure-as-code scanning, intelligent misconfiguration detection, and automated remediation workflows.
Pioneering AI Security: Architect and implement the security model for our AI agents performing complex audit work. This includes designing robust permission boundaries to strictly enforce agent capabilities, hardening against advanced prompt injection in untrusted documents, and ensuring ironclad tenant isolation across our agentic platform.
Elevate Engineering Security: Champion security best practices across all engineering teams through impactful design reviews and hands-on coaching, fostering a culture where secure development is ingrained, not an obstacle.
You are a seasoned security engineer with a passion for building secure systems and empowering fellow developers. You thrive in a fast-paced, evolving environment and are ready to leave your mark on a critical function.
You have a proven track record of leading security initiatives from initial design through successful adoption, demonstrating tangible improvements in engineering safety and velocity.
You possess deep, practical experience with identity and secrets management, including a strong command of protocols like OAuth 2.0 and OIDC.
You are intimately familiar with Kubernetes security primitives, including RBAC, namespaces, network policies, and admission controllers.
You demonstrate exceptional clarity in reasoning about trust boundaries and threat models, enabling you to effectively prioritize and address risks.
You are energized by breadth, ambiguity, and evolving priorities, rather than preferring a single, narrow lane. You're a problem-solver who enjoys diverse challenges.
Experience with SAML or SPIFFE/SPIRE, or a background in building workload authentication systems from scratch.
Hands-on experience securing LLM-based or other agentic systems.
Fieldguide is built on a strong foundation of shared values that guide our work and culture:
Fast: We launch with excellence and iterate to perfection.
Lovable: We deliver happiness and 11-star experiences.
Owners: We execute and run the business with true ownership.
Win-Win: We create mutual value and earn trust for life.
Inclusive: We scale the best ideas with inclusive teams.
We believe in supporting our team members comprehensively, both professionally and personally:
Flexible PTO to ensure you have time to recharge.
401k plan to help you build for your future.
Wellness benefits, including a bundle of free therapy sessions.
Technology & Work from Home reimbursement to set you up for success.
Flexible work schedules that empower work-life balance.