Founding Security Engineer

About the Company

Boom is on a mission to level the playing field for the 110+ million renters in the US by making housing more flexible, affordable, and rewarding. Boom is building a suite of rental financial services for renters and property managers, including tenant screening, rent payment reporting, and integrations with the largest property management systems.

Responsibilities

• Own application and cloud security posture across infrastructure and full stack product
• Run SOC 2 certification efforts and prepare for future compliance lifts like CASA and FCRA
• Build a secure SDLC including threat modeling, code review, and SAST/DAST/SCA tooling
• Lead incident response, vulnerability management, and blameless postmortems
• Partner with engineering on identity, access, and data handling for PII and payment data
• Manage customer security questionnaires and represent Boom in enterprise security conversations

Requirements

• 5+ years in security engineering or application security
• Hands-on web development experience securing production web apps and cloud environments (AWS preferred)
• Working knowledge of SOC 2 (ISO 27001, HIPAA, PCI, or GLBA/FCRA is a bonus)
• Strong grasp of OWASP Top 10 and common attack classes
• Backend-leaning full stack experience with Ruby (Grape/Sequel), React/Next.js, TypeScript, and Terraform
• Proficiency using AI coding agents like Claude Code
• Strong communication skills and ability to work in a fast-paced, early-stage environment

Benefits

• Competitive salary with stock options
• Full healthcare coverage (health, dental, vision) including 50% coverage for dependents
• 15 days of PTO, 3 sick days, and all US federal holidays
• Company-issued laptop/MacBook
• Company-sponsored training & development
• Regular off-sites, retreats, and travel opportunities