Senior security engineer

👉 You don't have to match 100% of the requirements. If you believe you're a strong fit, we'd love to hear from you. 🌟 We just raised $35M in Series A, if you join Tsuga you will experience a strong growth. About the role & the team At Tsuga, security has always been everyone’s responsibility. We want to keep it that way — but we’ve reached the point where we need someone whose full-time focus is raising the bar, setting the direction, and making it easy for every engineer to build securely. As our first dedicated Security Engineer , you’ll shape how security works at Tsuga from the ground up.

You’ll have the opportunity to influence our product, infrastructure, engineering practices, and customer-facing security, with direct support from the CTO. Where we're at today You’re not starting from scratch. We already have:

• mTLS between our control plane and customer clusters, tunneled connections, and strong admin authentication
• Aikido for code and dependency scanning, and Drata for compliance automation
• ISO 27001 and SOC 2 certification

• Own our security posture across the product — including the control plane, customer data planes, and internal tooling. Define security practices, review designs, and help engineers ship securely.
• Partner with our Forward Deployed Engineers to ensure customers receive clear, consistent, and timely communication around security incidents and vulnerabilities.
• Drive compliance and certifications alongside the CTO. Improve and automate the evidence collection and processes behind ISO 27001 and SOC 2.
• Threat-model critical systems that interact with customer environments, including credentials, tunnels, deployment paths, and IAM.
• Own the customer security process, from questionnaires and pentests to security reviews, and turn it into a scalable, repeatable workflow.
• Build security into the development lifecycle through CI checks, dependency management, secrets management, and infrastructure-as-code reviews.

& what we are looking for

• Hands-on experience securing cloud infrastructure and Kubernetes, ideally across multiple cloud providers.
• You’re comfortable reading and writing code. Our stack includes TypeScript, Rust, Python, and Pulumi — you don’t need to know all of them, but you should be comfortable reviewing and contributing to code.
• Experience with at least one SOC 2 or ISO 27001 certification cycle, and a good sense of what effective security and compliance tooling looks like.
• A pragmatic approach to risk. You enable engineers rather than gatekeep them.
• Strong communication skills — you can work effectively with engineers, customers, auditors, and leadership.

Tsuga

• 🔥 We move fast. As an early-stage startup, we are pragmatic, we value ownership, and quick feedback over unnecessary process and hierarchy.
• 🙏 We solve problems, not blame people. When something goes wrong, we fix it, learn from it, and improve the system.
• 🛠️ We are builders. We start everything from a blank page and we lean on your colleagues' knowledge to move faster.
• 🙇 We are customer-obsessed. We dogfood Tsuga every day, so you care how the product is actually used and want to contribute ideas.
• 💥 We lean hard on AI, but not blindly. Our problems are hard and can’t be AI-slopped away.
• 🌍 We're international from day one. Every quarter, the whole team meets at our French office to align on company goals, celebrate wins, and connect with teammates from the US, UK, the Middle East, and across Europe.

The job is published on Tsuga’s website. Open the original posting ↗ to submit your application. Screeningpass does not fill in a form for you.

Start a contact search from this page. Screeningpass suggests up to three people connected to the role. Choose whom to write to, then Screeningpass looks for their professional email and prepares a message. You review it and send it yourself with Gmail. An email address is not always available, and a reply is never guaranteed.

A search costs 1 credit. Your credit is returned if the search fails. Signing up gives you 3 credits, enough for 3 searches.

Screeningpass brings together internships, apprenticeships and jobs published by companies. For a job, Screeningpass finds someone to contact at the company, looks for their professional email and prepares a message using your CV. See how it works in detail.