Security Engineer at Incident

Join Incident.io as our first Security Engineer to lead application security for a 60+ person product team. You will partner with engineers to design secure systems from the ground up, identifying vulnerabilities through white-box and black-box testing. This foundational role shapes the security culture at a rapidly scaling, high-trust engineering organization.

• Partner directly with product teams to design and review features with security deeply integrated from the initial architecture phase.
• Identify and mitigate vulnerabilities using a mix of code reviews, architecture analysis, penetration testing, and automated fuzzing techniques.
• Implement pragmatic security tooling and automation across the CI/CD pipeline and GCP infrastructure to strengthen defenses without slowing delivery.

• Senior or Staff-level professional with a deep track record in application security, vulnerability research, or specialized red teaming.
• Hands-on experience with modern web stacks, specifically Go, TypeScript, React, and cloud security within Google Cloud Platform (GCP).
• Collaborative mindset that thrives when embedded in product teams, acting as a coach rather than a gatekeeper for secure coding practices.

• Foundational hire opportunity to build the security function from scratch without inheriting tech debt or rigid legacy processes.
• Join a high-growth Series B startup that has raised $100M from world-class investors like Index Ventures and Insight Partners.
• Work within a high-trust, ex-Monzo leadership culture that prioritizes shipping quality product daily and values engineering excellence.