Wise Insight

Key Information:
Work Model: On-site, 5 days per week
Employment Type: Full-time
Equity: Highly competitive
Visa: Open to H1B transfers and TN visa
Experience: 7 to 15 years

Key Responsibilities:
- Define and build the company's security architecture across the product, infrastructure, and AI/LLM pipeline
- Take ownership of the security program as the first dedicated security engineering hire, reporting directly to the CTO
- Partner with engineering teams throughout the development lifecycle to identify security risks and establish secure design patterns
- Perform threat modeling, vulnerability assessments, penetration testing coordination, vulnerability scanning, and risk prioritization
- Review application and infrastructure code to identify security vulnerabilities and recommend practical remediation
- Design and strengthen cloud security architecture, with particular focus on multi-tenant isolation and protection of sensitive customer data
- Partner with infrastructure teams on multi-region architecture and data residency requirements
- Establish lightweight security policies and processes supporting both practical security and compliance requirements
- Own internal IT security, including devices, access management, identity, and employee security controls
- Serve as the technical security point of contact for audits, enterprise security questionnaires, customer reviews, and security assessments

Requirements:
- 7 to 15 years of experience in security engineering or software engineering with a subsequent transition into security
- Hands-on experience across both application security and infrastructure security
- Experience building or establishing a security program from the ground up
- Strong understanding of threat modeling, vulnerability assessment, penetration testing, vulnerability scanning, and risk prioritization
- Ability to read and review code and identify security vulnerabilities
- Strong understanding of cloud security architecture
- Experience with multi-tenant environments and tenant isolation
- Ability to work closely with software and infrastructure engineers on secure system design
- Strong communication skills and the ability to explain technical security issues to engineering teams and business stakeholders