JobsBackendApplication Security Lead
Hightouch

Hightouch

·

Backend

Application Security Lead

RemoteLeadPosted Aug 17, 2026
AWSGCPKubernetesDockerPythonGoTerraformKafka+12 more

About this role

First dedicated security hire at Hightouch, defining application security from the ground up as the team scales from 70 to 140+ engineers. Hands-on role focused on securing multi-tenant distributed systems processing ~1M data syncs daily and 100K+ events/sec across multi-cloud infrastructure.

Must have

Been an early security hire at a SaaS or data infrastructure company

Experience securing multi-tenant platforms with tenant isolation and authorization models

Cloud security expertise across multiple clouds with customer-owned accounts

Built and secured data infrastructure as an early engineer, not just as a user

Privacy-adjacent security experience with PII handling, data residency, GDPR/CCPA controls

Significant distributed systems expertise to influence product teams from a place of trust

Technologies

PythonAWSGitDockerRESTLinuxTerraformKafkaMicroservicesGCPCloudSecuritySaaSOAuthgRPCWebSocketAPISKubernetesGoCI/CD

Responsibilities

Own Hightouch's application security posture end-to-end as the first dedicated security hire

Solve multi-tenant isolation on a system running ~1M data syncs per day and 100K+ events/sec

Build sub-tenant access control for multi-team and multi-brand differentiated access

Design security architecture frameworks for compute isolation and threat model new products

Improve rate limiting, abuse detection, and access control granularity for internet-facing APIs

Extend multi-region and multi-cloud backend to support data residency requirements globally

Own your roadmap and identify highest-leverage security problems to fix directly in the codebase

Benefits

Paid parental leaveHealth insuranceDental insuranceVision insuranceCompetitive salary and stock option planPre-IPO stock optionsFlexible hoursRemote workProfessional development

Recruitment process

1

First dedicated security hire with opportunity to define the function from the ground up

2

Team scaling from 70 to 140+ engineers

3

Hands-on, high-autonomy role spending most time in codebase, not meetings

4

Salary is location independent per remote-first policy

5

Offers ISO options with early exercise and 10 year post-termination exercise window

6

Five-stage interview process including security architecture and distributed systems deep dives

7

Company participates in E-Verify post-hire for U.S. work eligibility verification