Description
At OpenSpace, we’re redefining how the world’s most complex projects are built. Our AI-powered Visual Intelligence Platform uses computer vision and spatial AI to give construction teams a real-time view of what’s happening on-site, helping them build faster, safer, and with greater confidence.
But what truly sets us apart is our people. We hire curious, driven teammates who love solving hard problems, taking ownership, and making a real-world impact. Great people build great culture—and apparently it shows. Forbes has named OpenSpace one of America’s Best Startup Employers five years in a row. Come see what all the fuss is about ✨
Brief summary of role:
Security is in OpenSpace's DNA. A significant portion of our core engineering team — including several of our most senior engineers — came together at a security SaaS company before OpenSpace, and that shows up in how we design systems, review code, and think about customer data. We run a mature program today: an external security partner handles pen testing and structured assessments, our DevOps and IT team owns infrastructure security, IAM, and endpoint, and product engineers carry real ownership of the code they ship.
This role is about pushing our team from strong to elite: building the proactive security review muscle that lives day-to-day inside the engineering org, rather than at the cadence of an external engagement.
You'll maintain partnership with our existing security consultants. Our partners will continue to manage structured assessments including Penetration Testing and security assessments. You will support our team and maintain our in-house practice that catches issues long before they reach one.
This role reports to the Director of DevOps and IT.
What you will be doing:
- Run proactive security reviews of new features, architectures, and third-party integrations before they ship
- Assist in optimizing our application and product security practice: threat modeling, design review, secure SDLC integration
- Ownership in our approach to AI-related security risk, including:
- Securing our own AI/ML systems and the data flowing through them
- Governing internal use of AI dev tools (Claude Code and similar) so we move fast without leaking sensitive data
- Reviewing AI-assisted code contributions and helping us evolve our policies as the tooling matures
- Partner with engineering teams to triage and remediate vulnerabilities from pen tests, customer findings, and internal discovery
- Support our SOC 2 and ISO 27001 programs as a key technical contributor (compliance ownership lives elsewhere, but you'll be the engineering voice in the room)
- Help mature our incident response practice and run security tabletop exercises
- Build internal tooling and automation that scales security review without bottlenecking shipping
- Work with our consultant on scoping pen tests, vendor assessments, and customer security reviews
What we are looking for:
- 5+ years in security engineering, application security/product security and infrastructure security (DevSecops, etc)
- Hands-on experience doing proactive security review (threat modeling, design review, secure code review) on production systems
- Strong fundamentals in web application security, cloud security (we run primarily on AWS and GCP), and modern auth patterns
- Comfortable reading and reviewing code across at least one of our stacks (Python, Java/Kotlin, TypeScript)
- A real point of view on how AI changes the security landscape, both as a new risk surface and as new tooling for defenders
- Track record of working effectively in a startup or fast-moving environment where you have to prioritize ruthlessly and make tradeoffs
- Ability to influence engineers without owning their roadmap
Nice to have:
- Experience as the first or early security hire at a growth-stage company
- Hands-on contributor experience with SOC 2 and/or ISO 27001
- Background in security automation, internal tooling, or open source security work
- Familiarity with construction tech, geospatial systems, or computer vision
Our US Benefits include:
- 🩺 100% employer-paid medical, dental, and vision coverage
- 🌴 Flexible paid time off
- 💰 401(k) with company match
- 👶 Paid parental leave
- 🏡 Home office stipend
- 🤝 Employee referral program
- ✈️ Annual company retreats and team gatherings
Base Salary: $180,000-$230,000
The “Base Salary: range represents the low and high end of the anticipated salary range for this position across all US locations including but not limited to CA, CO, NY, WA, NV, MD, CT and RI. The determination of this anticipated Base Salary involves the consideration of many factors in making compensation decisions including but not limited to: location of candidate, unique skill sets, experience, training, performance, licensure and certifications, as well as other business and organizational needs.
Please note: We are unable to provide visa sponsorship or employment-based immigration support for this position. Applicants must be authorized to work in the country of employment without current or future sponsorship
#LI-Remote
OpenSpace welcomes employees from varied backgrounds and walks of life, and it’s reflected in our diverse community. OpenSpace is proud to be an equal opportunity employer and is committed to providing equal employment opportunities to all employees and applicants for employment, without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
Similar jobs
Est. 120,000 USD
Arionkoder is an AI consulting firm helping companies build, embed, and own AI systems that drive real business outcomes. We combine Product Development, Artificial Intelligence, and Team Augmentation to craft digital pr…
Est. 144,000 USD
About Appspace: At Appspace, we’re passionate about creating better work experiences for people everywhere, and we’re looking for people that feel the same way. Our global office locations and flexible work culture help…
Est. 173,500 USD
About SecurityScorecard: SecurityScorecard is the global leader in cybersecurity ratings, with over 12 million companies continuously rated, operating in 64 countries. Founded in 2013 by security and risk experts Dr. Ale…
Est. 173,500 USD
About SecurityScorecard: SecurityScorecard is the global leader in cybersecurity ratings, with over 12 million companies continuously rated, operating in 64 countries. Founded in 2013 by security and risk experts Dr. Ale…
About SecurityScorecard: SecurityScorecard is the global leader in cybersecurity ratings, with over 12 million companies continuously rated, operating in 64 countries. Founded in 2013 by security and risk experts Dr. Ale…
About SecurityScorecard: SecurityScorecard is the global leader in cybersecurity ratings, with over 12 million companies continuously rated, operating in 64 countries. Founded in 2013 by security and risk experts Dr. Ale…
About Appspace: At Appspace, we’re passionate about creating better work experiences for people everywhere, and we’re looking for people that feel the same way. Our global office locations and flexible work culture help…
Est. 267,300 USD
We are seeking a highly technical Security Engineer to join our Product Security team. This role is integral to ensuring the security and integrity of our products and services. You will conduct in-depth code reviews, im…
Est. 173,000 USD
Our Purpose At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them become…
About SecurityScorecard: SecurityScorecard is the global leader in cybersecurity ratings, with over 12 million companies continuously rated, operating in 64 countries. Founded in 2013 by security and risk experts Dr. Ale…
About SecurityScorecard: SecurityScorecard is the global leader in cybersecurity ratings, with over 12 million companies continuously rated, operating in 64 countries. Founded in 2013 by security and risk experts Dr. Ale…
Est. 83,500 USD
About SecurityScorecard: SecurityScorecard is the global leader in cybersecurity ratings, with over 12 million companies continuously rated, operating in 64 countries. Founded in 2013 by security and risk experts Dr. Ale…
About SecurityScorecard: SecurityScorecard is the global leader in cybersecurity ratings, with over 12 million companies continuously rated, operating in 64 countries. Founded in 2013 by security and risk experts Dr. Ale…
Est. 196,600 USD
About Upstart At Upstart, we’re united by a mission that matters: to radically reduce the cost and complexity of borrowing for all Americans. Every day, we bring creativity, experimentation, and advanced AI to reshape ac…
Est. 207,500 USD
Space is a warfighting domain. True Anomaly seeks those with the talent and ambition to build the technology that secures it. OUR MISSION True Anomaly delivers decisive capabilities for space superiority. We build autono…
Est. 218,500 USD
Our Purpose At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them become…
Est. 145,000 USD
Chainguard is the trusted source for open source. By delivering hardened, secure, and production-ready builds of all the open source software engineers and AI agents rely on, Chainguard helps organizations build faster,…
Est. 210,000 USD
*Position is IN OFFICE at our Santa Clara, CA (San Francisco Bay Area) office About Us Orkes is the operating system for AI agents and workflows, providing the battle-tested infrastructure required to move AI from simple…
Est. 185,500 USD
Our Purpose At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them become…
Est. 158,400 USD
Dive in and do the best work of your career at DigitalOcean. Journey alongside a strong community of top talent who are relentless in their drive to build the simplest scalable cloud. If you have a growth mindset, natura…
Est. 152,000 USD
Our Purpose At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them become…
Our Purpose At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them become…
Est. 266,000 USD
Our Purpose At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them become…
Est. 212,500 USD
Meet Slingshot At Slingshot Aerospace, we're on a mission to make space safer and more secure for everyone. Our work directly impacts global security, disaster response, climate monitoring, and the critical infrastructur…
Est. 167,500 USD
Obsidian Security is the leading SaaS security platform, trusted by global enterprises like Snowflake, T-Mobile, and Algolia. We protect 200+ organizations across North America, Europe, the Middle East, Southeast Asia, A…
Est. 157,000 USD
Our Purpose At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them become…
Est. 115,000 USD
Obsidian Security is the leading SaaS security platform, trusted by global enterprises like Snowflake, T-Mobile, and Algolia. We protect 200+ organizations across North America, Europe, the Middle East, Southeast Asia, A…
Est. 262,500 USD
Who You Are You’re a strategic security leader who connects business risk, regulatory needs and technology into cohesive multi-domain security solutions. You’re comfortable leading executive-level discoveries and influen…
Est. 200,000 USD
Who We Are Lightning AI is the company behind PyTorch Lightning. Founded in 2019, we build an end-to-end platform for developing, training, and deploying AI systems—designed to take ideas from research to production with…
Our Purpose At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them become…