Lead Security Engineer

About the Role

As the Lead Security Engineer at Samaya, you will build the security foundation that enables us to win and retain the world's most security-conscious financial institutions as customers. We run Python and Kubernetes workloads on GCP that process sensitive financial data at scale — and this is our first dedicated security hire. You'll own everything: building controls, running compliance programs, and representing security externally to enterprise customers.

Key Responsibilities

• Build and operate security controls across GCP: cloud security posture, DLP, KMS/CMEK, secrets management, single-tenant isolation, IAM, network controls, and audit logging
• Own incident response playbooks, tabletop drills, and cross-team coordination during security incidents
• Run vulnerability management, including scanners and red-team-style assessments
• Define and enforce access controls to production systems, internal tools, and SaaS applications; own the security ops stack (SIEM, endpoint, alerting)
• Own end-to-end compliance: SOC 2 Type II, ISO 27001, and what comes next — including evidence collection, auditor management, and compliance tooling
• Turn compliance findings into engineering work and customer-facing artifacts; maintain policies, governance docs, and alignment with standards and regulators
• Support sales and customer success in security reviews with enterprise InfoSec teams; build processes to handle DDQs and security questionnaires at scale

Required Qualifications

• 6+ years in security engineering, with at least one stint as the primary security owner at a startup or small company
• Proven SOC 2 Type II and/or ISO 27001 delivery — ran the program end-to-end, not just supported a consultant
• Hands-on GCP or AWS experience: IAM, KMS, CMEK, VPC, Security Command Center
• Terraform and IaC fluency — can write and review real infrastructure code, not just review it conceptually
• Comfortable representing security externally to customers, auditors, or regulators

Benefits

Health: Access comprehensive health insurance, including medical, dental, vision, flexible spending account (FSA), and short-term disability.

Wealth: Support for your long-term financial wellbeing with a 401(k) and pre-tax benefits (e.g. commuting).

Rest: Enjoy flexibility to rest and recharge as needed, with unlimited PTO (Paid Time Off).

Flexibility: Work flexibly with a hybrid setup — typically team members spend a minimum of three days in the office per week.

Travel: Grow and connect with a travel budget that encourages conference attendance, customer visits, and team gatherings.

Equipment: Create your ideal workspace with an office equipment allowance to set up what works best for you.