SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Fieldguide is automating assurance and audit work for global commerce and capital markets, with a focus on cybersecurity, privacy, and financial audits. The company serves over 50 of the top 100 accounting and consulting firms and is backed by Goldman Sachs Alternatives, Bessemer Venture Partners, 8VC, Floodgate, and Y Combinator.
As one of the first dedicated security hires, you will help build the security function from the ground up. In this Senior Software Security Engineer role, you will make the secure path the easy path for every Fieldguide engineer. Your responsibilities span secure design, identity and secrets management, infrastructure security, and agentic AI security. You'll prioritize around the biggest risks rather than fixed specialties, so your focus will shift over time.
Key responsibilities include:
- Partnering with engineering to identify the biggest risks in systems before they ship, and building secure frameworks and libraries that make control adoption the path of least resistance.
- Building and maintaining identity and secrets management systems, including credential issuance, rotation, and workload authentication. The company is moving towards short-lived, workload-based identity across cloud and Kubernetes environments.
- Hardening cloud security controls and contributing to continuous cloud security posture management through infrastructure-as-code scanning, misconfiguration detection, and automated remediation.
- Building the security model for AI agents that perform audit work, including designing permission boundaries, hardening against prompt injection in untrusted documents, and ensuring strict tenant isolation.
- Raising the security bar across engineering through design reviews and coaching, helping teams build securely without creating bottlenecks.
You'll report to the Lead Security Engineer and work closely with Product and Platform teams. The tech stack includes AWS, Kubernetes, Terraform, Python, TypeScript, GraphQL, LLM gateway and agent orchestration, and security tooling such as Socket, Chainguard, and GitHub Advanced Security.
REQUIREMENTS:
- 5+ years of software engineering experience building and maintaining security-relevant systems in production.
- Demonstrated leadership of a security initiative from design through adoption, with measurable impact on engineer safety and velocity.
- Hands-on experience with identity and secrets management, including OAuth 2.0 and OIDC protocols.
- Familiarity with Kubernetes security primitives: RBAC, namespaces, network policies, and admission controllers.
- Ability to reason clearly about trust boundaries and threat models to prioritize risk.
- Comfort with breadth, ambiguity, and evolving priorities rather than a single narrow specialization.
BONUS:
- Experience with developer security tooling (SAST, dependency scanning, secure build infrastructure).
- Experience with SAML, SPIFFE/SPIRE, or building workload authentication systems from scratch.
- Experience securing LLM-based or agentic systems.
