Lead Security Engineer

About the role

CNTXT is looking for a hands‑on Lead Security Engineer to become the first dedicated security hire and own the end‑to‑end cybersecurity program. You will define the security strategy and immediately start implementing policies, infrastructure hardening, and testing while preparing to scale a security team as the company grows.

Key responsibilities

• Define and drive CNTXT’s security roadmap, risk register and governance framework.
• Secure the software development lifecycle with threat modeling, secure code reviews, SAST/DAST, and supply‑chain scanning.
• Harden cloud environments (GCP, AWS, Azure) through network segmentation, workload identity, WAF, DDoS protection and IaC guardrails.
• Implement container and Kubernetes security, image scanning and runtime protection.
• Establish logging, monitoring and alerting using SIEM/SOAR with actionable detection rules.
• Design and enforce IAM, SSO, MFA, least‑privilege access and secret management (Vault, cloud KMS).
• Deploy endpoint protection (EDR/XDR), device management (MDM) and disk encryption across employee devices.
• Own vulnerability management lifecycle, conduct internal pentests and coordinate external red‑team engagements.
• Build and maintain incident response, backup, disaster recovery and business continuity plans.

Required profile

• 5+ years of experience in application, cloud and infrastructure security.
• Proven ability to work independently and take full ownership of security programs.
• Strong communication skills to brief leadership and influence engineering teams.
• Experience scaling security functions in fast‑growing technology companies.

Required skills

• Terraform
• SAST / DAST tools
• CI/CD pipelines
• GCP, AWS, Azure
• WAF, CDN, DDoS protection
• Kubernetes and container security
• SIEM / SOAR platforms
• IAM, SSO, MFA, role‑based access control
• HashiCorp Vault, cloud KMS
• EDR / XDR solutions
• MDM and disk encryption
• Vulnerability assessment and penetration testing
• Incident response and forensics