The company makes a continuous threat modeling platform for security, privacy, and GRC teams. It gives them the capacity to cover more products with accurate, source-cited assessments that enterprise teams can rely on.
The team has reviewed thousands of security-critical products, from badge scanners to stablecoin platforms to autonomous driving features.
The company was a Top 10 Finalist in the RSAC 2026 Innovation Sandbox Contest. Advisors include former CISOs of Disney, Costco, Amplitude, and Chevron, the former CEO of Reddit, and the former CPO of Brex.
The company is early and deeply technical. It wants a practitioner who can stand in front of buyers and be believed.
The buyers are security, AppSec, GRC, and privacy leaders at Fortune 500s. They will stress-test the product and then the company, so the role exists to own the technical case, working alongside Sales, who runs the deal.
This is not the Forward Deployed Security Engineer role, since you hand off at signature rather than running production onboarding. It is not a product management role, and you will not be working from someone else's demo script.
In your first 12 months, success means POVs passing against criteria you wrote, technical objections resolved in the room rather than escalated, running a full technical evaluation without a founder present, and building demo environments, templates, and answers the team uses every week.
Responsibilities
Find out how a prospect runs reviews today and spot where the process will break first.
Ask follow-up questions to find the real goal, which is often smaller than the original request.
Build demos around the prospect's own use case and artifacts, not a generic sandbox.
Turn loose asks such as less effort or reasonable quality into criteria a proof of value can pass or fail.
Set up tenants, load the customer's knowledge, and queue historical and live cases.
Run the midpoint check and the technical readout against the criteria the customer signed.
Own the architecture questions that decide enterprise deals: tenancy and data isolation, SSO/SAML/SCIM, deployment patterns, model providers, data residency, and audit defensibility.
Answer accuracy and hallucination objections with evidence, and carry the company's security posture through the customer's vendor review.
Explain honestly where the product fits compared with threat modeling tools, scanners, GRC platforms, and building in-house.
Turn evaluation friction into specific, reproducible feedback for engineering.
Build demo environments, POV templates, and technical answers the team can use without you.
Requirements
You have 5+ years either running security and privacy reviews for large enterprises, or working in sales engineering, solutions architecture, or technical pre-sales selling to security teams.
You understand enterprise security architecture, including tenancy and data isolation, data residency, and AI governance.
You speak the language of security practitioners, including STRIDE, DPIA, TPRM, CVE, and SSDLC.
You have run a multi-week technical engagement to a deadline without it drifting.
You know Jira, ServiceNow, GitHub, Confluence, or OneTrust, and how review workflows run inside them.
You write clearly. Success criteria, test plans, and readouts are the core deliverables.
Experience: 6+ years.
Strongly preferred: hands-on work with threat modeling, privacy impact assessments, or vendor risk assessments.
Strongly preferred: working knowledge of SSO, SAML, SCIM, IP allowlisting, and model providers.
Strongly preferred: experience at early-stage startups.
You do not need a quota or a sales title. If you do not meet every point, tell us what you would bring instead.
Conditions
Seattle or San Francisco preferred, remote also OK.
In-person meetings happen 1-2 times per quarter.
You must be authorized to work in the United States without visa sponsorship now or in the future.
Visa: US citizen/visa only.
Benefits
Build the technical function from the ground up, with the team that follows shaped around what you establish.
See your work show up directly in the product and in the customers the company wins.
Competitive salary, equity, and benefits. Benefits may vary based on role, country, and local regulations.
Salary ranges are a guideline. Actual base salary may vary based on market and individual qualifications objectively assessed during interviews, and the ranges may be modified.
Where you’d work
Fully remote
You can work from
United States
No visa sponsorship
You must already be able to work in the United States
About the company
Hidden companyCompany hidden
Industry: Cybersecurity
Good
Your chances
Still hiring, not crowded yet, and a person reads your message.
19 checks run
8 good signs
1 red flag
Still hiring?
12 checks
Actively hiring
StaleHiring
In its favour4
Still on the company's own careers site, checked 1 h agoModerate evidence
Specific about the basics: pay, place, level, stack and contract all statedSlight evidence
States its salarySlight evidence
1 moreFewer
A hiring contact is attached to itSlight evidence
How crowded?
7 checks
Low
QuietCrowded
In its favour4
You can message the hiring contact and skip the queueModerate evidence
Remote within United States onlySlight evidence
Only for people already authorized to work in United StatesSlight evidence
1 moreFewer
Senior level: far fewer people qualifySlight evidence
Against it1
Open for 2 weeks: applications have had time to pile upModerate evidence
?
Fits Me
How well does this role fit you?
Answer a few questions or drop your CV, and every role gets a fit score with the reasons, this one first.