Staff Software Engineer, Dandy

• You're passionate about building secure systems, thrive on technical challenges, enjoy a blend of proactive defense and reactive response, and want to apply your expertise to make a tangible difference in a fast-paced, growing company
• 8+ years of progressive, hands-on experience in cybersecurity, with strong emphasis on application security, secure design, and vulnerability management
• Deep understanding of web application and API security, including common vulnerabilities, secure software architecture, and threat modeling
• Experience collaborating directly with software engineering teams to guide implementation of secure development practices and influence technical design decisions
• Proven ability to lead technical efforts in vulnerability identification, triage, and remediation across both application code and cloud infrastructure
• Hands-on experience implementing and operating security tooling as well as basic infrastructure level controls
• Demonstrated experience leading or significantly contributing to security incident response efforts, including log and forensic analysis
• Strong communication and collaboration skills; able to influence without authority and guide teams toward secure-by-default outcomes

Desirable

• We're growing rapidly and are seeking a highly skilled and hands-on Staff Security Engineer to be our first dedicated security engineer
• This is a unique opportunity to lay the technical groundwork for security, making a direct impact on protecting our platform and customer data from day one
• You'll have significant autonomy to select, implement, and manage security solutions, hunt for and remediate vulnerabilities, and be a key player in incident response
• While you'll be our first security hire, your focus will be on deep technical execution and building out our defenses and security posture
• You'll collaborate with engineering teams to design and implement secure application architectures, influencing the development of new features with security in mind from the start
• Provide expert guidance on secure coding practices, API security, authentication/authorization patterns, and data protection throughout the software development lifecycle
• Lead vulnerability management efforts, including identifying risks in applications and infrastructure (using both automated and manual methods), prioritizing findings, and coordinating remediation with engineering teams
• Evaluate, select, and drive adoption of application and infrastructure security tools — such as SAST, DAST, SCA, container scanning, etc. — ensuring they are well integrated into developer workflows
• Define and help implement incident response processes and playbooks; act as a senior technical contributor during incident investigations, supporting teams through forensics, containment, and recovery
• Partner with the infrastructure team to establish guardrails and controls across GCP environments, including identity and access management, network security, and container hardening
• Champion a security-first engineering culture by providing practical education, mentoring, and hands-on support to help teams build secure systems confidently and efficiently