Lead Security Engineer

About the role

CNTXT is looking for a hands‑on Lead Security Engineer to become the first dedicated security hire. You will own the end‑to‑end cybersecurity strategy, from cloud and application security to endpoint protection, and translate that strategy into concrete implementations.

Key responsibilities

• Define and drive CNTXT’s security roadmap, risk register and policies aligned with business priorities.
• Secure the software development lifecycle with threat modeling, secure code reviews, SCA, SAST and DAST in CI/CD pipelines.
• Harden GCP, AWS and Azure environments, implement network segmentation, workload identity, WAF, DDoS protection and IaC guardrails.
• Manage container and Kubernetes security, including image scanning and runtime protection.
• Establish IAM, SSO, MFA, least‑privilege access and secrets management using Vault or cloud KMS.
• Deploy endpoint protection (EDR/XDR), device management and disk encryption across employee devices.
• Own vulnerability management, conduct internal pentests, and coordinate external red‑team engagements.
• Build incident response plans, backup, disaster recovery and business continuity processes.

Required profile

• Proven experience designing and implementing security programs in fast‑growing technology companies.
• Ability to work independently, roll up sleeves and deliver security controls quickly.
• Strong communication skills to brief leadership and influence engineering teams.

Required skills

• Terraform
• SAST / DAST
• Software Composition Analysis (SCA)
• CI/CD pipelines
• GCP, AWS, Azure
• Kubernetes, Docker
• Container image scanning
• SIEM / SOAR
• Vault or cloud KMS
• Identity & Access Management (IAM), SSO, MFA
• WAF, CDN, DDoS protection
• Endpoint Detection & Response (EDR/XDR)
• Mobile Device Management (MDM)
• Vulnerability assessment and penetration testing
• Incident response and forensics