SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 240,000 - 0 / annual
AngelList is building the financial infrastructure for private markets, which now represent $28T in assets. The company operates multiple platforms including Funds (software for private funds), Nova (banking network), Meridian (wealth platform for accredited investors), and USVC (registered fund for venture investing). With $200B+ in assets under management and 30,000+ startups funded, AngelList is transforming how people access private market investments.
You will be a hands-on security engineer responsible for designing and building systems that make security a foundational property of AngelList's infrastructure. Your focus will be on creating unified identity and access layers, cloud security architecture, automated provisioning and revocation, and guardrails that enable teams to ship quickly without compromising security.
Key responsibilities include:
- Owning AngelList's security foundations across AWS infrastructure, identity, access control, authentication, authorization, and secrets management
- Designing and building security architecture and guardrails into infrastructure-as-code, CI/CD, and developer workflows so secure defaults are automatic
- Building IAM systems and least-privilege access models that scale across employees, services, and machine identities, including access reviews and privileged access management
- Writing security tooling and automation that identifies weaknesses and remediates them without human intervention, leveraging AI to improve decision quality
- Solving security risks at the platform and architectural level, and contributing to application security through threat modeling, secure design, and vulnerability remediation
- Working directly with Infrastructure, Engineering, IT, and Product teams to roll out security systems
You will report to the Head of Security on a small team with significant scope. The role emphasizes designing systems where the secure path is the easiest path, and using AI to transform how security engineering operates—moving from reactive alert triage to proactive, context-aware systems that make autonomous decisions.
Requirements:
- 7+ years of experience in security engineering, cloud security, infrastructure security, or identity work
- Deep, hands-on experience with AWS/GCP security architecture and IAM
- Proven ability to write real software: building automation and internal tooling to solve security problems, with judgment about when to buy commercial solutions
- Track record of driving security changes across engineering teams that didn't report to you, using influence and better tooling rather than mandates
- Fluency in infrastructure-as-code, CI/CD, and modern DevOps practices
- Demonstrated success shipping security controls into engineering platforms that developers actually adopted
- Systems-level thinking: ability to spot systemic weaknesses and fix the class of problem rather than individual instances
- Experience building something with AI that changed how you work, with informed opinions about where human judgment remains essential