Security Engineer
This is the employer's own posting, not a copy on a job board.
What we know
Is it still open?
Confirmed still open
Last checked 22h ago — checked against the employer's own applicant tracking system, which is the company answering directly.
We re-read the employer's own applicant tracking system and the posting was still there. That is the company answering directly.
How old is it?
Posted 135d ago
The date the source published, not the day we noticed it (2026-06-20). Last seen at its source 2h ago.
We have tracked this listing since 3 Sep 2026 (59 days). The employer's own board has carried it every time we have read it, most recently 2 hours ago.
Is it remote?
Remote US, Remote India
That is the location the employer filed this posting under. Quoted as written — we do not re-word the source's own location.
Who may apply?
United States, India
The description states no restriction of its own. This is the source's own tag.
Pay not stated
Similar roles pay, by region:
- North America $154.5k–225k/yr (5,480 listings, all levels)
- Asia $65.8k–165k/yr (50 listings, all levels)
Middle 50% of Engineering listings that do state pay in each region, in the currency most of them state. This employer has published no salary; this is what comparable listings we hold disclose, never converted between currencies or periods. How this is calculated.
Skills named in the ad
Recognised terms only, from a fixed vocabulary — this is what CV matching compares against.
Carried by 1 source
-
Ashby employer's own board first seen 59d ago · last seen 2h ago
The listing
ABOUT OUTMARKET
Outmarket is the AI platform for insurance, trusted by more than 250 brokerages to run the work their business depends on. Commercial insurance still runs on dense documents and slow, manual workflows, and that is exactly what we automate: quote comparisons, coverage gap and tower analysis, policy review, and proposal generation, all grounded in our customers’ own data and source-cited so teams can trust the output.
The impact is concrete. Teams save 12 to 15 hours per person every week, cut errors by roughly 65 percent, and win more business, all on infrastructure that is SOC 2 Type II certified, single-tenant, and never used to train AI models. We are an AI-first company in both what we build and how we work, shipping quickly and in close partnership with the agencies that rely on us.
WHAT YOU’LL GET
A high-impact role with ownership from day one.
Competitive compensation and meaningful equity.
Direct collaboration with founders and real users.
Remote-first flexibility.
The opportunity to help build an AI-native product from the ground up.
ABOUT THE ROLE
We are hiring a Security Engineer to own product and application security for a single-tenant AI platform handling sensitive insurance data. Every customer runs in a fully isolated environment, with its own database on separate cloud infrastructure. You will build security into how we ship, across secure SDLC, AppSec, cloud posture, and supply-chain, and lead our response when issues arise.
WHY THIS ROLE
Own security for a platform trusted with sensitive insurance and customer data.
Build security into the product from the ground up, not bolt it on.
Have broad scope across application, cloud, and supply-chain security.
WHAT YOU’LL DO
Drive secure SDLC and security-focused code review across the engineering org.
Own application security: authz, SSRF and injection prevention, and secrets management across many isolated customer environments.
Strengthen cloud security posture (GCP IAM, egress controls) and keep per-customer environments consistent, hardened, and free of drift, plus supply-chain controls.
Coordinate penetration testing, threat modeling, and vulnerability management.
Lead incident response and advance compliance readiness (e.g., SOC 2).
WHAT WE’RE LOOKING FOR
4+ years in security engineering, with strong application security depth.
Hands-on experience securing cloud-native systems, ideally single-tenant or per-customer deployments, including IAM, network boundaries, and secrets at scale.
Working knowledge of OWASP-class risks and how to prevent them in real code.
Ability to partner with engineers and make security practical, not blocking.
BONUS IF YOU HAVE
Detection & response or compliance/GRC experience.
Experience securing AI/LLM systems or regulated-data products.