Senior Software Security Engineer

San Francisco · Remote (USA) · 5+ years experience · Full-time · Posted Oct 13, 2026

At a glance

Fieldguide is establishing a new state of trust for global commerce and capital markets by automating the work of assurance and audit practitioners, specifically in cybersecurity, privacy, and financial audits. We build software for the people who enable trust between businesses.
We’re based in San Francisco, CA and built remote-first. We’re backed by Goldman Sachs Alternatives, Bessemer Venture Partners, 8VC, Floodgate, Y Combinator, and more. Over 50 of the top 100 accounting and consulting firms trust Fieldguide to power mission-critical work.

As a Senior Software Security Engineer at Fieldguide, you will help build the security function from the ground up as one of the first dedicated security hires.
You will make the secure path the easy path for every engineer by ranging across secure design, identity and secrets management, infrastructure security, and agentic AI security.
You will report to the Lead Security Engineer and work closely with both Product and Platform teams.

Partnering with engineering to find the biggest risks in a system before it ships, and building secure frameworks and libraries that make control adoption the path of least resistance.
Building and maintaining identity and secrets management systems, including credential issuance, rotation, and workload authentication.
Hardening cloud security controls and contributing to continuous cloud security posture management through infrastructure-as-code scanning, misconfiguration detection, and automated remediation.
Building the security model for AI agents that perform audit work, including designing permission boundaries and enforcing tenant isolation.
Raising the security bar across engineering through design reviews and coaching.

5+ years of software engineering experience building and maintaining security-relevant systems in production.
Led a security initiative from design through adoption.
Hands-on experience with identity and secrets management, including protocols such as OAuth 2.0 and OIDC.
Familiar with Kubernetes security primitives, including RBAC, namespaces, network policies, and admission controllers.
Ability to reason clearly about trust boundaries and threat models to prioritize risk.
Thrive on breadth, ambiguity, and evolving priorities rather than a single narrow lane.

Experience with developer security tooling such as SAST, dependency scanning, or secure build infrastructure.
Experience with SAML or SPIFFE/SPIRE, or building workload authentication systems from scratch.
Experience securing LLM-based or agentic systems.