SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 200,000 - 300,000 / annual
Nuvo is building a category-defining B2B commerce and payments platform to digitize the $11T B2B economy. The company is bringing modern commerce infrastructure to business-to-business transactions, similar to how Shopify and Stripe transformed consumer commerce.
As the first dedicated security hire, you will own and build the security function from the ground up at an early-stage, fast-growing startup. You will define security strategy, establish best practices, and embed security into the product and engineering culture.
Key responsibilities include:
- Own application and product security end-to-end: threat modeling, secure design, code review, and partnering with engineers to build secure-by-default features
- Build the security function from scratch: set the roadmap, establish standards, choose tooling, and define practices for the engineering team
- Find, prioritize, and drive remediation of vulnerabilities across product and infrastructure; build guardrails to prevent recurrence
- Operate across the full stack as needed: cloud and infrastructure hardening (IAM, secrets, network, Kubernetes), logging, detection and incident response, and compliance foundations (SOC 2)
- Make security part of engineering culture; write and review high-quality code, contribute to systems you protect, and mentor the team
- Use the best tools for the job; the company has experience with Vue, GraphQL, and custom DSLs for permissions
You will have significant impact on team culture, customer trust, and the broader economy given the sensitive financial data handled.
Requirements:
- 5+ years in security engineering with deep application/product security expertise and ability to operate across cloud, infrastructure, and detection
- Track record of building or substantially shaping a security program; comfort making prioritization decisions independently
- Strong engineering fundamentals: read and write production code; earn trust of engineering partners
- Strong problem-solving and communication skills; ability to articulate technical risk to engineers, leadership, and customers
- Passion for internet technologies and sharp instinct for how modern systems are attacked and defended
- Experience in early-stage engineering teams or fast-growing companies solving hard, ambiguous problems with bias for action
