Description review
Senior Software Security Engineer
Fieldguide · San Francisco, CA, Remote (USA) · back to the listing
HR standards
73/100
solid
Title ↔ description
91/100
strong
Reads as
Security Engineer
100% confident
What this role officially is
ICT security administrator — ESCO, the EU occupation classification
ICT security administrators plan and carry out security measures to protect information and data from unauthorised access, deliberate attack, theft and corruption.
Also known as: network security administrator, system security administrator, ICT security administrators, IT security administrator
How others title the same work
Large employers
- Security Risk Management Specialist Canonical Ltd.
- Security Software Engineer Canonical Ltd.
- Senior Security Operations Engineer Canonical Ltd.
- Staff Security Operations Engineer Canonical Ltd.
- Ubuntu Security Engineer Canonical Ltd.
Startups
- Security Engineer (Bangalore, India) AiPrise
- Security & Trust Engineer Alex
- Elucid | Senior Security Engineer | Boston, MA | ONSITE (hybrid) | $130k–$170k Elucid
- Factory | Security Engineer | ONSITE, San Francisco, CA | Full-Time Factory
- Factory | Security Engineer | Onsite in San Francisco | Full-time Factory
What the listing never says
- 30 bullet points. Long requirement lists deter qualified candidates, who read them as hard gates. Scope clarity
The listing, marked up
Nothing in the wording of this listing tripped a check. The scores above still judge how complete and coherent it is.
About Us
Fieldguide is establishing a new state of trust for global commerce and capital markets by automating the work of assurance and audit practitioners, specifically in cybersecurity, privacy, and financial audits. We build software for the people who enable trust between businesses.
We’re based in San Francisco, CA and built remote-first. We’re backed by Goldman Sachs Alternatives, Bessemer Venture Partners, 8VC, Floodgate, Y Combinator, and more. Over 50 of the top 100 accounting and consulting firms trust Fieldguide to power mission-critical work.
About the Role
Our customers hand us their most sensitive audit and compliance data, and our product is built around trust. That means our own security practices are core to what we promise them. The Information Security & Compliance team protects Fieldguide’s systems and earns that trust every day.
As one of the first dedicated security hires, you’ll help build the security function from the ground up. As a Senior Software Security Engineer, you will make the secure path the easy path for every Fieldguide engineer. You’ll range across secure design, identity and secrets management, infrastructure security, and agentic AI security. We prioritize around the biggest risks rather than fixed specialties, so your focus will shift over time.
This is a hands-on engineering role. You’ll write and ship production code, and you’ll be hired and evaluated as a software engineer first. You’ll report to our Lead Security Engineer and work closely with both Product and Platform teams.
Our Stack
• Application: Python, TypeScript, GraphQL
• Cloud & Infra: AWS, Kubernetes, Terraform
• AI: LLM gateway and agent orchestration across multiple model providers
• Security Tooling: Socket, Chainguard, GitHub Advanced Security, frontier cyber models
What You’ll Own
• Partnering with engineering to find the biggest risks in a system before it ships, and building secure frameworks and libraries that make control adoption the path of least resistance.
• Building and maintaining identity and secrets management systems, including credential issuance, rotation, and workload authentication. We’re moving towards short-lived, workload-based identity across our cloud and Kubernetes environments.
• Hardening our cloud security controls and contributing to continuous cloud security posture management through infrastructure-as-code scanning, misconfiguration detection, and automated remediation.
• Building the security model for AI agents that perform audit work. You’ll design permission boundaries that enforce what agents can see and do, harden them against prompt injection in untrusted documents, and ensure strict tenant isolation across our agentic platform.
• Raising the security bar across engineering through design reviews and coaching, helping teams build securely without a gate in the way.
Who You Are
• You have 5+ years of experience as a software engineer, shipping production services, libraries, or platforms. You write strong, well-tested code and can build security systems independently.
• You’ve led a security initiative from design through adoption, and you can point to engineers who are safer and faster because of it.
• You have hands-on experience with identity and secrets management, including protocols such as OAuth 2.0 and OIDC.
• You’re familiar with Kubernetes security primitives, including RBAC, namespaces, network policies, and admission controllers.
• You reason clearly about trust boundaries and threat models to prioritize risk.
• You thrive on breadth, ambiguity, and evolving priorities rather than a single narrow lane.
Bonus Points
• Experience with developer security tooling such as SAST, dependency scanning, or secure build infrastructure.
• Experience with SAML or SPIFFE/SPIRE, or building workload authentication systems from scratch.
• Experience securing LLM-based or agentic systems.
More about Fieldguide:
Fieldguide is a values-based company. Our values are:
• Fearless - Inspire & break down seemingly impossible walls.
• Fast - Launch fast with excellence, iterate to perfection.
• Lovable - Deliver happiness & 11 star experiences.
• Owners - Execute & run the business with ownership.
• Win-win - Create mutual value & earn trust for life.
• Inclusive - Scale the best ideas with inclusive teams.
Some of our benefits include:
• Competitive compensation packages with meaningful ownership
• Flexible PTO
• 401k
• Wellness benefits, including a bundle of free therapy sessions
• Technology & Work from Home reimbursement
• Flexible work schedules
Fieldguide is establishing a new state of trust for global commerce and capital markets by automating the work of assurance and audit practitioners, specifically in cybersecurity, privacy, and financial audits. We build software for the people who enable trust between businesses.
We’re based in San Francisco, CA and built remote-first. We’re backed by Goldman Sachs Alternatives, Bessemer Venture Partners, 8VC, Floodgate, Y Combinator, and more. Over 50 of the top 100 accounting and consulting firms trust Fieldguide to power mission-critical work.
About the Role
Our customers hand us their most sensitive audit and compliance data, and our product is built around trust. That means our own security practices are core to what we promise them. The Information Security & Compliance team protects Fieldguide’s systems and earns that trust every day.
As one of the first dedicated security hires, you’ll help build the security function from the ground up. As a Senior Software Security Engineer, you will make the secure path the easy path for every Fieldguide engineer. You’ll range across secure design, identity and secrets management, infrastructure security, and agentic AI security. We prioritize around the biggest risks rather than fixed specialties, so your focus will shift over time.
This is a hands-on engineering role. You’ll write and ship production code, and you’ll be hired and evaluated as a software engineer first. You’ll report to our Lead Security Engineer and work closely with both Product and Platform teams.
Our Stack
• Application: Python, TypeScript, GraphQL
• Cloud & Infra: AWS, Kubernetes, Terraform
• AI: LLM gateway and agent orchestration across multiple model providers
• Security Tooling: Socket, Chainguard, GitHub Advanced Security, frontier cyber models
What You’ll Own
• Partnering with engineering to find the biggest risks in a system before it ships, and building secure frameworks and libraries that make control adoption the path of least resistance.
• Building and maintaining identity and secrets management systems, including credential issuance, rotation, and workload authentication. We’re moving towards short-lived, workload-based identity across our cloud and Kubernetes environments.
• Hardening our cloud security controls and contributing to continuous cloud security posture management through infrastructure-as-code scanning, misconfiguration detection, and automated remediation.
• Building the security model for AI agents that perform audit work. You’ll design permission boundaries that enforce what agents can see and do, harden them against prompt injection in untrusted documents, and ensure strict tenant isolation across our agentic platform.
• Raising the security bar across engineering through design reviews and coaching, helping teams build securely without a gate in the way.
Who You Are
• You have 5+ years of experience as a software engineer, shipping production services, libraries, or platforms. You write strong, well-tested code and can build security systems independently.
• You’ve led a security initiative from design through adoption, and you can point to engineers who are safer and faster because of it.
• You have hands-on experience with identity and secrets management, including protocols such as OAuth 2.0 and OIDC.
• You’re familiar with Kubernetes security primitives, including RBAC, namespaces, network policies, and admission controllers.
• You reason clearly about trust boundaries and threat models to prioritize risk.
• You thrive on breadth, ambiguity, and evolving priorities rather than a single narrow lane.
Bonus Points
• Experience with developer security tooling such as SAST, dependency scanning, or secure build infrastructure.
• Experience with SAML or SPIFFE/SPIRE, or building workload authentication systems from scratch.
• Experience securing LLM-based or agentic systems.
More about Fieldguide:
Fieldguide is a values-based company. Our values are:
• Fearless - Inspire & break down seemingly impossible walls.
• Fast - Launch fast with excellence, iterate to perfection.
• Lovable - Deliver happiness & 11 star experiences.
• Owners - Execute & run the business with ownership.
• Win-win - Create mutual value & earn trust for life.
• Inclusive - Scale the best ideas with inclusive teams.
Some of our benefits include:
• Competitive compensation packages with meaningful ownership
• Flexible PTO
• 401k
• Wellness benefits, including a bundle of free therapy sessions
• Technology & Work from Home reimbursement
• Flexible work schedules