Lead Security Engineer

About the Company

Liberate builds AI agents to automate manual tasks for the $2.7T insurance industry. We've raised $72M to date, including a $50M Series B, to build reasoning agents capable of handling the entire spectrum of insurance carrier and broker operations.

Responsibilities

• Own product security end to end, including threat modeling, secure design reviews, and high risk architecture decisions
• Build secure SDLC practices including security requirements, CI checks, and security test coverage
• Drive multi-tenant and data boundary safety, including secrets handling and key management
• Own SOC 2 and related compliance programs end to end, translating requirements into technical controls
• Lead product security incident readiness, including playbooks, tabletop exercises, and postmortems
• Run vulnerability management including triage, prioritization, remediation, and pen tests
• Manage IAM, least privilege, production access, and secure architecture for multi-tenant services

Requirements

• 8+ years in security engineering, product security, or platform security roles
• 4+ years owning security architecture or security programs for a production SaaS product
• Demonstrated ownership of SOC 2 or similar compliance programs in fast-moving environments
• Experience in early-stage or high-growth companies building security systems from scratch
• Deep product security background in modern cloud systems and multi-tenant SaaS
• Strong engineering chops to review designs and drive pragmatic solutions

Preferred Qualifications

• Experience with tools like Vanta
• Ability to act as the first dedicated product security hire