Senior Security Engineer

About the Company

Nectar Social is building the AI-native social operating system that enables a new era of commerce. Founded by ex-Meta product and engineering leaders and backed by GV and True Ventures, we work with brands like Oura Health and e.l.f. Cosmetics to converge community, conversation, and commerce.

Responsibilities

• Own the security of deployed applications, including threat modeling, secure design reviews, and vulnerability remediation across services and AI infrastructure
• Lead compliance initiatives such as SOC 2, ISO 27001, GDPR, and CCPA
• Manage the security side of the sales cycle, including customer security questionnaires and enterprise security reviews
• Build and run vulnerability management, secrets management, identity and access, and security monitoring practices
• Manage third-party risk and the penetration-testing program

Requirements

• 5+ years in security engineering, application/product security, or a related role at a software company
• Strong application and cloud security fundamentals
• Hands-on experience leading or operating a compliance program (SOC 2, ISO 27001, or similar) end to end
• Solid programming skills for building security tooling and automation
• Ability to operate in fast-moving startup environments with high autonomy

Preferred Qualifications

• Experience establishing a security and compliance function at an early-stage or rapidly scaling SaaS company
• Familiarity with AWS, Pulumi, Postgres, ClickHouse, Turbopuffer, or Temporal

Benefits

• Competitive compensation and early equity
• Health, vision, and dental benefits plus 401(k) match
• Clear career growth opportunities
• Free lunch in Palo Alto