Founding Security Engineer

About this role

Boom is seeking a Founding Security Engineer to build and mature their security program from the ground up as they scale their rental fintech platform. You'll own security across their full stack, handle sensitive consumer data compliance, and partner with engineering leadership to embed security into their development practices.

What you'll do

• Own application and cloud security posture across infrastructure and full-stack product
• Lead SOC 2 certification effort and prepare for future compliance requirements (CASA, FCRA, state regulations)
• Build secure SDLC practices including threat modeling, code review, SAST/DAST tooling, and secrets management
• Lead incident response, vulnerability management, and blameless postmortems
• Partner with engineering on secure identity, access, and PII/credit/payment data handling
• Handle customer security questionnaires and represent Boom in enterprise security discussions

What they're looking for

• Application security and security engineering (5+ years)
• AWS cloud security
• SOC 2 certification and compliance programs
• OWASP Top 10 and common attack patterns
• Ruby (Grape/Sequel), React/Next.js, TypeScript
• Incident response and vulnerability management
• Third-party API security (OAuth, webhooks)
• Web application and full-stack security

Benefits

• Hands-on pragmatic engineering culture focused on shipping real product
• Work closely with CPO and engineering leadership
• Opportunity to build security function from the ground up
• Based in Austin, TX with leadership and product team
• Impact protecting sensitive consumer data