LawnStarter

LawnStarter

LawnStarter provides an online platform for booking lawn mowing services from local professionals, ensuring a seamless and efficient customer experience with transparent pricing and a focus on quality and reliability.

Professional Services
11-50
Founded 2013
$18M raised

Description

  • Own application security across the PHP/Laravel and TypeScript/React codebase, including threat modeling, secure SDLC, code reviews, and vulnerability management.
  • Implement SAST, secret scanning, dependency scanning, and security review gates in CI for AI-authored code.
  • Strengthen AWS and infrastructure security across IAM, networking, encryption, secrets management, and EKS/Kubernetes.
  • Map PCI scope and drive SOC 2, LGPD, vendor-risk, and audit-readiness programs.
  • Improve detection coverage using Datadog, Sentry, and AWS signals, and create and rehearse incident-response runbooks.
  • Define security standards, playbooks, controls, and a multi-year roadmap that scales beyond one person.
  • Partner with delivery teams and Cloud & DevOps to make secure development practices practical and widely adopted.
  • Build the foundation for and eventually hire, mentor, and lead a small security team within approximately 12–18 months.


Requirements

  • Hands-on expertise in at least three of application security, cloud security, compliance, and incident response, with the ability to develop depth in the fourth.
  • Experience building and owning technical security controls rather than focusing only on policy, audits, or documentation.
  • Strong AWS security experience, including IAM, network security, encryption, secrets management, and infrastructure guardrails.
  • Experience with application-security tooling such as SAST, secret scanning, dependency scanning, threat modeling, and vulnerability management.
  • Experience with PCI, SOC 2, LGPD, vendor risk, or comparable compliance and data-protection programs.
  • Experience with detection engineering, incident response, monitoring, and security metrics such as MTTD and MTTR.
  • Daily use of AI tools for security work, including reviewing AI-authored code, triaging findings, threat modeling, and drafting detections or policies.
  • Ability to prioritize risk pragmatically, automate security processes, collaborate effectively, and lead hands-on as a security-of-one.
  • Interest in building a security function and leading a team while continuing to perform individual-contributor work.
  • Experience securing payment systems, marketplaces, customer data, or comparable high-impact platforms is valuable.

Benefits

  • Base salary of $80,000–$100,000 USD annually.
  • Fully remote role with a US-distributed engineering team and asynchronous work practices.
  • High autonomy to define and lead LawnStarter’s security function.
  • Provided access to Claude Code and the company’s AI agent tooling.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

ingénieur de sécurité principal

Shakepay 51-250 Diversified Financial Services

Shakepay recherche un ingénieur de sécurité principal pour protéger son infrastructure, ses produits et ses données clients tout en développant ses capacités de sécurité, d’observabilité et d’intelligence artificielle dans un environnement fintech réglementé.

AWS Bitcoin Git GitHub
19 hours, 54 minutes ago

Security Software Engineer II, Detection and Response

Pinterest 5K-10K Internet Software & Services

Pinterest is hiring a Security Engineer to strengthen detection and incident response capabilities, protect employees and infrastructure, and adapt security operations to emerging threats in a cloud-first environment.

Go Network Security Python Ruby SIEM TCP/IP
20 hours, 24 minutes ago

Principal Linux Security Engineer

CIQ 51-250 Internet Software & Services

CIQ is seeking a Linux security engineer to strengthen the security, compliance, vulnerability management, and release processes for enterprise Linux infrastructure supporting HPC, AI/ML, defense, and regulated workloads.

Ansible Linux
21 hours, 9 minutes ago

Senior Microsoft Purview Engineer

New Era Technology US 1K-5K IT Services

New Era Technology is seeking a hands-on Senior Microsoft Purview Engineer to operate and mature enterprise data protection capabilities in a live production environment through a 6–12 month staff augmentation engagement, with possible full-time conversion.

1 day, 19 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers