Software Security Engineer
US$215,000 – US$230,000 / yr base salary
Posted 13 Oct 2026
Advertised as “Senior Software Security Engineer”
BranchFactor Summary
The original posting with the fluff stripped out
- Expected experience
- 5+ yrs
- Management level
- Individual contributor
- Employment
- Hybrid
- Contract
- Full-time
| Base salary | US$215,000 – US$230,000 / yr |
|---|
About Us
Fieldguide is establishing a new state of trust for global commerce and capital markets by automating the work of assurance and audit practitioners, specifically in cybersecurity, privacy, and financial audits. We build software for the people who enable trust between businesses.
We’re based in San Francisco, CA and built remote-first. We’re backed by Goldman Sachs Alternatives, Bessemer Venture Partners, 8VC, Floodgate, Y Combinator, and more. Over 50 of the top 100 accounting and consulting firms trust Fieldguide to power mission-critical work.
About the Role
Our customers hand us their most sensitive audit and compliance data, and our product is built around trust. That means our own security practices are core to what we promise them. The Information Security & Compliance team protects Fieldguide’s systems and earns that trust every day.
As one of the first dedicated security hires, you’ll help build the security function from the ground up. As a Senior Software Security Engineer, you will make the secure path the easy path for every Fieldguide engineer. You’ll range across secure design, identity and secrets management, infrastructure security, and agentic AI security. We prioritize around the biggest risks rather than fixed specialties, so your focus will shift over time.
You’ll report to our Lead Security Engineer and work closely with both Product and Platform teams.
Our Stack
-
Cloud & Infra: AWS, Kubernetes, Terraform
-
Application: Python, TypeScript, GraphQL
-
AI: LLM gateway and agent orchestration across multiple model providers
-
Security Tooling: Socket, Chainguard, GitHub Advanced Security, frontier cyber models
What You’ll Own
-
Partnering with engineering to find the biggest risks in a system before it ships, and building secure frameworks and libraries that make control adoption the path of least resistance.
-
Building and maintaining identity and secrets management systems, including credential issuance, rotation, and workload authentication. We’re moving towards short-lived, workload-based identity across our cloud and Kubernetes environments.
-
Hardening our cloud security controls and contributing to continuous cloud security posture management through infrastructure-as-code scanning, misconfiguration detection, and automated remediation.