Sr. Security Engineer

At Intenseye, we believe protecting people at work is non-negotiable. That’s why we’re building the world’s most advanced AI-powered platform for industrial environments, designed to help organizations move from reactive programs to proactive risk prevention across safety, operations, and quality management. Our technology gives enterprises the ability to see risk and inefficiency as they emerge, take action in real time, and prevent incidents before they happen. Powered by cutting-edge AI and Intenseye’s proprietary Sentinel hardware, our platform delivers ethical, highly accurate intelligence across complex worksites. EHS, operations, and quality teams gain continuous leading indicators, deep operational insight, and unprecedented visibility into how work actually happens. Today, Intenseye helps protect hundreds of thousands of workers across 25+ countries—and we’re just getting started.

The Role As our first security hire, you’ll build our security function from the ground up: defining the architecture, owning compliance, protecting our AI platform and customer data, and establishing a security-first culture. You’ll report directly to the CTO. We’re looking for someone who is deeply technical and ready to own the security function end-to-end. As our first security hire, you’ll cover a lot of ground—writing policy, reviewing code, responding to customer security questionnaires, and hands-on infrastructure work. This role is a strong fit for someone who is: A founder-minded builder: you’re energized by creating security infrastructure from scratch, not inheriting a mature program—and you take full ownership of outcomes. Technically deep and strategically broad: you can write policy and write code. You can threat-model a distributed AI system and present risk to leadership in the same week. Pragmatically risk-driven: you understand that startups must move fast, and you find ways to reduce risk without becoming a blocker—earning trust across engineering and product by being a partner, not a gatekeeper. Thinking beyond the technical: you’ve started to think about governance, organizational resilience, and how security creates competitive advantage at the enterprise level. A clear, confident communicator: you can simplify complex risk for the CEO, rally engineers around secure-by-default practices, and represent Intenseye’s security posture to enterprise customers and prospects. \n What you’ll do: Architect and build Intenseye’s security program end-to-end: cloud infrastructure security, application security, data protection, endpoint, and identity. Own our compliance roadmap—including SOC 2 Type II, ISO 27001, and GDPR—and drive it to completion, partnering with legal, finance, and customer success. Embed security into the SDLC: define secure coding standards, introduce SAST/DAST tooling, and partner with engineering to make secure-by-default the norm. Build and run incident response: design our monitoring and alerting stack, write the playbooks, and lead the response when things go wrong. Own IAM strategy across internal systems, cloud infrastructure, and customer-facing platforms. Lead threat modeling and vulnerability management—working with engineering to prioritize and remediate across a complex, globally distributed system. Be the face of security to enterprise customers: own security questionnaires, due diligence reviews, and executive-level conversations about our security posture. Advise the CTO and executive team on security risk, investment, and strategy as the function matures. What we’re looking for 8+ years in security engineering, with meaningful experience owning or significantly shaping a security function—not just executing within one. Deep hands-on expertise in cloud security (GCP strongly preferred): network security, IAM, secrets management, container security (Kubernetes/Docker), and cloud-native threat detection. Strong application security fundamentals: OWASP Top 10, secure SDLC, API security, and experience integrating SAST/DAST into CI/CD pipelines. Proven experience driving a compliance program through completion (SOC 2 Type II, ISO 27001, or equivalent)—not just supporting it. Solid grasp of data privacy (GDPR, CCPA) and the ability to work cross-functionally with legal and GTM teams on customer-facing