Lead Security Engineer

LawnStarter

. Lead security end-to-end across the PHP/Laravel and TypeScript/React codebase, AWS infrastructure, payment and customer-data flows, and compliance posture .

Posted 9/30/2026full-timeRemote • Mexico, Peru, Colombia, UruguaySenior💰 $80,000 - $100,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates hands-on expertise in application security, cloud security, and compliance, with a strong focus on building and owning security controls across multiple domains. Capable of leading incident response, threat modeling, and establishing security standards while collaborating effectively with delivery teams and Cloud & DevOps.

Highest-signal resume keywords

Application SecurityCloud SecurityIncident ResponseAWS Infrastructure SecurityThreat Modeling

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Secure SDLCCode ReviewVulnerability ManagementAutomated Security GatesSASTSecret ScanningDependency ScanningDetection and ResponseScript WritingPipeline Configuration

Soft Skills

CollaborationLeadershipRisk Prioritization

Tools & Technologies

AWSDatadogSentryEKSKubernetes

Industry Keywords

PCI Scope MappingSOC 2LGPD ReadinessVendor RiskSecurity Questionnaires

Tech Stack

Tools & technologies

AWSCloudKubernetesLaravelPHPReactSDLCTypeScript

About the role

Key responsibilities & impact

Lead security end-to-end across the PHP/Laravel and TypeScript/React codebase, AWS infrastructure, payment and customer-data flows, and compliance posture
Set the multi-year security direction and build scalable security controls
Establish threat models, automated scanning, incident runbooks, and security standards
Own application security, including secure SDLC, code and design reviews, CI scanning, and vulnerability-management processes
Strengthen AWS and infrastructure security, including IAM, networking, encryption, secrets management, and EKS/Kubernetes hardening
Map PCI scope and drive SOC 2 and LGPD readiness
Manage vendor risk and respond to customer or auditor security questionnaires
Improve detection coverage using Datadog, Sentry, and AWS signals
Lead incident response and establish baseline MTTD/MTTR
Define security controls, review gates, and conventions for AI-agent-authored code
Create standards, playbooks, and hiring criteria for the future security team
Collaborate with delivery teams and Cloud & DevOps while initially performing most hands-on work
Build a business case and plan for the first security hires, with an explicit path to leading a small team in roughly 12–18 months

Requirements

What you’ll need

Hands-on expertise in at least three of application security, cloud security, compliance, and incident response
Real depth building and owning security controls across multiple domains
Ability to use AI tools daily for triaging findings, threat modeling, reviewing agent-authored code, drafting detections, and policy work
Experience with application security, threat modeling, secure SDLC, code and design review, SAST, secret scanning, dependency scanning, and vulnerability management
Experience securing AWS infrastructure, including IAM, networking, encryption, secrets management, and EKS/Kubernetes hardening
Experience with PCI scope mapping, SOC 2 and LGPD readiness, vendor risk, and security questionnaires
Experience with detection and response using Datadog, Sentry, and AWS signals
Ability to build automated security gates, secure-coding conventions, and evaluations for AI-agent-authored code
Hands-on engineering ability to write scripts, build pipelines, configure AWS guardrails, and ship detections
Ability to prioritize risks pragmatically and automate security controls
Strong collaboration with delivery teams and Cloud & DevOps
Payments- and marketplace-risk awareness
Interest in shaping a security function and growing into team leadership

Benefits

Comp & perks

Base salary: $80,000–$100,000 USD annually
Lead security and take it to the next level
Top-of-market cash compensation
Fully remote work with a US-distributed engineering team
Deep-focus and asynchronous work environment
Flexible autonomy to run your own environment
AI tooling provided, including Claude Code and the engineering agent stack