SlipstreamJobsFresh Startup & VC-Backed Jobs

Lead Infrastructure Security Engineer

Panthalassa - Portland, OR, United States - Hybrid - posted 2026-10-20

Apply on the company site

SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.

Salary: USD 180,000 - 250,000 / annual

Panthalassa is a renewable energy and ocean technology company developing devices that harness energy from the ocean's harshest conditions without human maintenance. The company is a public benefit corporation backed by leading venture capitalists and philanthropic investors, headquartered in Portland, Oregon. As an Infrastructure Security Engineer, you will scale security capabilities across infrastructure and software systems. Working closely with the Head of Information Security, you will strengthen the organization's security posture through threat modeling, architecture reviews, automation, and incident response. The role requires broad security infrastructure and engineering skills, combined with strong software engineering fundamentals and the ability to quickly learn new languages and frameworks. Key responsibilities include: - Assist in building out the Infrastructure Security and Security Engineering functions - Conduct infrastructure, code, and service architecture reviews to provide security guidance - Lead engineers in threat modeling for services and deployments - Define culturally useful security metrics in collaboration with the Head of Information Security - Participate in interviewing and onboarding of security personnel - Assist with incident response and provide escalation support as the company grows - Integrate, maintain, and automate security scanning tools (SAST, DAST, SCA, secrets management) into CI/CD pipelines - Build and integrate agentic security tools for company needs - Conduct hands-on threat modeling and architectural design reviews before code is written - Perform manual and automated reviews and targeted penetration testing on platforms and internal components - Manage external Vulnerability Disclosure or Bug Bounty programs and translate regulatory compliance requirements into engineering tasks The company values creative, scrappy, collaborative environments where the best ideas drive direction. Staff backgrounds include SpaceX, Blue Origin, Boeing, Tesla, Apple, Google, Amazon, Microsoft, and research universities. REQUIREMENTS: - 6+ years of experience with Infrastructure Security and Security Engineering processes - 2+ years of experience as a Team Lead or Manager of a Security team - Broad and deep security foundational knowledge - Professional experience using AI systems and agents for security outcomes - Deep hands-on experience with cloud platforms (AWS, Azure, or GCP) and modern infrastructure tools (Docker, Kubernetes, Infrastructure as Code) - Bachelor's degree in Computer Science, Cybersecurity, or equivalent practical experience DESIRED QUALIFICATIONS: - Experience with software development in mechanical engineering environments - Hands-on experience with industry-standard security tools (Snyk, GitHub Advanced Security, Burp Suite, Fortify) - Familiarity with OWASP Top 10, CWE Top 25, and secure design patterns

Similar roles