Security Engineer, Cape
Corporate Security
$200-255k
+ Equity
Python
Junior and Mid level
Remote from US
Privacy-first mobile network
Open for applications
Privacy-first mobile network
101-200 employees
B2CB2BSecurityPrivacyTelecommunications
Open for applications
$200-255k
+ Equity
Python
Junior and Mid level
Remote from US
101-200 employees
B2CB2BSecurityPrivacyTelecommunications
Company mission
To reimagine connectivity in this mobile-first world, with privacy and security at the core.
Role
Who you are
- Bachelor's degree in Computer Science, Information Security, or a related field or equivalent experience. Advanced degrees or certifications (e.g., CISSP, GIAC, Security+, CISM) are advantageous
- A minimum of 2 years of experience in information security, with meaningful experience across corporate/IT security domains (identity, endpoint, network, GRC)
- Deep understanding of enterprise identity providers and SSO/MFA platforms, endpoint/EDR tooling, MDM platforms, and email security tooling
- Working knowledge of common compliance frameworks (e.g., SOC 2, ISO 27001)
- Familiarity with government/public-sector security frameworks (FedRAMP, FISMA, NIST SP 800 series, CJIS) is a plus, given Cape's government-facing customer base
- Working knowledge of consumer privacy regulations (GDPR, CCPA, and other regional privacy laws) as they apply to handling customer data
- Exposure to secure software development lifecycle (SSDLC) practices and partnering with engineering on secure design reviews
- Proficiency in scripting or automation (Python, shell scripting, or similar) to streamline security operations and reporting
- Familiarity with vendor/third-party risk management processes and tooling
- Solid knowledge of network security, encryption technologies, and secure business-system configuration
- Excellent analytical skills for identifying and mitigating complex security vulnerabilities and risks
- Strong communication and leadership abilities, capable of working collaboratively across teams and effectively conveying technical information to non-technical stakeholders
- Organized and able to manage multiple priorities in a dynamic, fast-paced environment
- Security Expertise – Experience identifying and resolving security issues across corporate systems (identity, endpoint, network, and data). Secure-by-design principles, and partnering with IT/engineering during design time
- Analytical – Collects data and information; uses critical thinking to solve problems and make sound decisions
- Collaboration & Teamwork – Builds partnerships with others to reach common goals. Able to share credit with coworkers, display enthusiasm and promote a friendly group-working environment. Works closely with other departments as necessary, supports group decisions and solicits opinions from coworkers
- Communication – Presents information through verbal and written communication; reads and interprets complex information; listens well. Develops and delivers multi-mode communications that convey clear understanding of unique audiences
- Decision-Making – Acts quickly to solve problems and exercises good judgment by making sound and well-informed decisions. Perceives the impact and implications of decisions; makes effective and timely decisions, even when data is limited
- Dependability/Self-Management – Possesses the personal discipline and diligence necessary to keep commitments and to complete tasks. Is accountable for actions and outcomes. Makes effort to improve situations without explicit instructions; a self-starter who consciously manages his/her own time and resources
- Customer Centric – Values the importance of delivering high quality, innovative service to employees; understands the needs of the client; responds promptly and is accessible to them; follows through on commitments in a timely manner; maintains positive, long-term working relationships; assumes ownership of process issues and takes appropriate steps to mitigate problems. Gets consistently high feedback from stakeholders. Raises hand to help
- Flexibility / Adaptability – Adjusts quickly to changing priorities, conditions, and challenges. Copes effectively with complexity and change. Is comfortable navigating ambiguity. Can handle business changes with ease and without frustration or a feeling of defeat. Feels comfortable dealing with limited unknowns in an area they are well versed in
- Planning & Organization – Manages multiple projects, determines project urgency in a meaningful and practical way, uses goals to guide actions, creates detailed action plans, and organizes tasks
- Do Excellent Work
- Respect The Opportunity (each other, the user)
- Overshare
- Bias Towards Action
What the job involves
- We are seeking an experienced Security Engineer with expertise in corporate security to join our team
- As a strategic partner, you will make an immediate impact by leveraging your expertise across identity, endpoint, network, and information security alongside IT, engineering, and business teams
- This role is pivotal in reducing risk across our corporate environment, covering employee-facing systems, internal infrastructure, and third-party risk, and will be responsible for designing, implementing, and maintaining security measures that comply with regulatory standards, enhance internal processes, and minimize data security risks
- Through developing ongoing security strategies, technologies, and a strong security culture, you will support the organization's business objectives and daily operations
- Design, implement, and manage security controls and policies across corporate IT systems, focusing on the confidentiality, integrity, and availability of employee, customer, and business data
- Own and mature identity and access management (IAM/SSO/MFA), endpoint security (EDR, MDM), and email/network security (phishing defense, DLP, firewalls, VPN) across the organization
- Perform comprehensive security assessments of corporate systems and vendors to identify vulnerabilities, assess risk, and recommend actionable mitigation strategies
- Establish governance, guardrails, and monitoring for emerging employee tooling, including the associated data-handling, access, and third-party risks
- Own the vulnerability management lifecycle across the corporate fleet: scanning, risk-based prioritization, remediation and patch SLAs, and closure tracking across endpoints and internal systems
- Lead security awareness and phishing simulation programs to build an organization-wide culture of security
- Contribute to compliance and audit efforts as needed, lending security context where it helps the business move faster
- Assess and manage third-party/vendor security risk, including security questionnaires, contract reviews, and ongoing vendor monitoring
- Assist in running and addressing findings from penetration tests, red team exercises, and internal audits, ensuring prompt and effective remediation
- Stay informed about the latest security threats, vulnerabilities, and compliance mandates affecting corporate environments; provide strategic guidance on technologies and best practices
- Investigate security incidents and insider-threat concerns in partnership with HR, Legal, and IT as needed
- Raise the security bar across the company by mentoring engineers and partners on secure practices, fostering a culture of security awareness and continuous improvement
- Collaborate with stakeholders to integrate security requirements effectively into IT projects and broader business initiatives
Application process
- Click the link below to apply
Our take
The massive amounts of data that telecom companies hold on their customers, and the various weak spots in mobile networks, offer many lucrative possibilities for hackers. With massive mobile network data breaches affecting the likes of US telecom giant AT&T, Cape is a mobile network responding with a way to reconcile personal privacy and national security.
Cape positions itself as a privacy-first mobile network, offering 5G and 4G speeds with more privacy. It collects minimal personally identifiable information from its customers as well as offering spam protection, hardened account security and firewall. The network itself piggybacks on existing cellular networks and uses advanced encryption and data protocols to protect its customers.
The company has attracted good investment and secured contracts with the US military because of the network's ability to contribute to national security. Cape only came out of stealth in 2024, though, and its first steps will be to provide its users with eSIMs. A partnership with UScellular has helped grow the company's market share, and it's now available nationwide. 2026 Series C funding is being used to further grow its customer base and accelerate R&D efforts.
Freddie
Company Specialist at Welcome to the Jungle
Company
Funding (last 2 of 5 rounds)
Mar 2026
$100m
SERIES C
Mar 2025
$15m
SERIES B
Total funding: $176m
Company benefits
- Medical insurance
- Vision insurance
- Dental insurance
- 401(k)
- Paid maternity leave
- Paid paternity leave
- Commuter benefits
- Disability insurance
Company HQ
North Rosslyn, Arlington, VA
Leadership
John Doyle
(Founder & CEO)Currently Board Member at Vannevar Labs. Previously held positions at Palantir Technologies and was a Judicial Law Clerk at Eastern District of Virginia.
Share this job
View 16 more jobs at Cape