Staff Software Engineer - Security

Contract type
Ongoing
Work mode
Remote · London
Experience
Senior · 8+ years

Job description

Flow Engineering is hiring its first dedicated security hire, a Staff Software Engineer, to own security across its AI-native requirements platform for hardware teams. The role covers security architecture, platform hardening, SOC 2 and defense-related compliance, and securing LLM and agentic systems.

At a glance

Employment
Full-time
Work mode
Remote · London

What you'll do

  • Own security architecture across the platform: threat modeling, secure design reviews, and the standards we build against.
  • Harden the full stack, from application security to cloud infrastructure (identity, network, secrets), tenant isolation, and data protection.
  • Drive SOC 2 and get us ready for the certifications defense and aerospace customers ask about, including export control and ITAR.
  • Secure our AI and agentic systems: prompt injection, data leaking through models, what actions agents are allowed to take, and guardrails.
  • Build the security tooling we need across detection, monitoring, vulnerability management, and CI/CD.
  • Stand up incident response and run it, from detection through postmortems.
  • Work with sales and product to get through security reviews and win customer confidence.

What we're looking for

  • 8+ years building production software, including running secure services at scale in the cloud.
  • Deep experience in application and cloud security (AWS, GCP, or Azure): identity and access, secrets, network security, data protection.
  • You've owned security in a regulated or high-trust environment and have implemented SOC 2 yourself.
  • Solid on threat modeling, secure architecture, and incident response.
  • You've secured AI or LLM systems.
  • You're comfortable being the security lead at a startup and setting the agenda yourself.

Nice to have

  • Export control, ITAR, or FedRAMP experience is a big plus.

Benefits

  • Competitive salary and meaningful equity.
  • Health, dental, and vision coverage.
  • Flexible time off and support for experimentation, learning, and staying current with the AI ecosystem.

Apply

About Flow Engineering

AI-native requirements platform for modern engineering organizations

Flow Engineering is an AI-native requirements platform for modern engineering organizations, enabling hardware teams to collaborate with AI agents to design, validate, and evolve complex systems with speed and rigor.

Key facts

  • Customers in defense, aerospace and more trust Flow with sensitive systems requirements.
  • This is the company's first dedicated security hire.

What they value

  • Speed over everything: prototype AI workflows quickly, then harden what works.
  • Own, downscope, ship, iterate: one clear owner per feature, from prototype to production.
  • Fundamentals done well: evaluation, observability, and safety are part of the first version, not an afterthought.