Skip to main content
CareerApp

Director, Security Engineering

InstaLily

New York, NY · full time · Lead / Staff / Principal

$200,000 – $250,000

Listed on InstaLily’s own careers site. You apply with them directly — we never stand between you and the employer.

What this role is

Lead security for an AI agent platform operating inside enterprise systems at scale, owning compliance programs, cloud hardening, and customer trust while spending 30–50% of your time writing automation and security tooling. This is a greenfield role reporting to the CEO at a well-funded Series B company where security directly influences deal closure and product design.

Our summary, not InstaLily’s wording. The full posting is on their site.

What they ask for

Required

  • 8+ years in security engineering with hands-on program ownership at a SaaS company
  • Strong GCP and AWS IAM, Kubernetes, and infrastructure-as-code skills
  • Production-quality Python or TypeScript with ability to ship automation and security tooling
  • End-to-end SOC 2 Type II program ownership including audits and controls
  • Experience leading customer security reviews and CISO-level conversations
  • Real hands-on experience building systems with LLMs or agents
  • In-person availability 5 days per week in New York or San Francisco office

Nice to have

  • Built a security function from scratch at Series B/C SaaS and taken it through SOC 2 Type II audit
  • Secured LLM or agent products in production
  • Led real incident response
  • Multi-tenant isolation experience
  • Pen-test program management
  • Okta or IdP rollout leadership
  • CNAPP tooling experience (Wiz, Aikido)
  • GDPR, ISO 27001, HITRUST, NIST CSF, or EU AI Act familiarity
  • Certifications: CISSP, CCSP, GCP Professional Cloud Security Engineer, AWS Security Specialty, OSCP
  • Public security work: talks, writing, open-source tooling

Turn on analytics and we load Google Analytics: Google gets the pages you open and what you do here — searches, jobs you view, jobs you apply to — and sets its own cookies. Leave it off and the only cookies we set are your login, your theme, and this answer. Accept All also records a yes to advertising, which nothing uses yet. Privacy Policy.