At a Glance
- Tasks: Lead security architecture and harden our AI-native platform for sensitive systems.
- Company: Join Flow, an innovative AI-native requirements platform for modern engineering.
- Benefits: Competitive salary, equity, health coverage, and flexible time off.
- Other info: Dynamic startup environment with opportunities to innovate and grow.
- Why this job: Be the first dedicated security hire and shape our security landscape.
- Qualifications: 8+ years in software development with deep cloud security experience.
The predicted salary is between 72000 - 88000 £ per year.
About Flow
Flow Engineering is an AI-native requirements platform for modern engineering organizations, enabling hardware teams to collaborate with AI agents to design, validate, and evolve complex systems with speed and rigor.
About the role
Our customers in defense, aerospace and more trust us with sensitive systems requirements. That means security is a first-order part of the product, so we're looking for a Staff Software Engineer to own it. This is our first dedicated security hire, so you'll define the security architecture, harden the platform, and build out the compliance posture. Since LLMs and agentic workflows sit at the center of what we do, you'll also lead how we secure them.
What you'll do
- Own security architecture across the platform: threat modeling, secure design reviews, and the standards we build against.
- Harden the full stack, from application security to cloud infrastructure (identity, network, secrets), tenant isolation, and data protection.
- Drive SOC 2 and get us ready for the certifications defense and aerospace customers ask about, including export control and ITAR.
- Secure our AI and agentic systems: prompt injection, data leaking through models, what actions agents are allowed to take, and guardrails.
- Build the security tooling we need across detection, monitoring, vulnerability management, and CI/CD.
- Stand up incident response and run it, from detection through postmortems.
- Work with sales and product to get through security reviews and win customer confidence.
About you
- 8+ years building production software, including running secure services at scale in the cloud.
- Deep experience in application and cloud security (AWS, GCP, or Azure): identity and access, secrets, network security, data protection.
- You’ve owned security in a regulated or high-trust environment and have implemented SOC 2 yourself.
- Export control, ITAR, or FedRAMP experience is a big plus.
- Solid on threat modeling, secure architecture, and incident response.
- You’ve secured AI or LLM systems.
- You’re comfortable being the security lead at a startup and setting the agenda yourself.
Our stack (AI-leaning)
- TypeScript/Node.js and Python for AI and backend services.
- Modern LLM APIs and orchestration libraries for building agentic workflows.
- Postgres and other managed cloud services for data and state.
How we work & values
- Speed over everything: prototype AI workflows quickly, then harden what works.
- Own, downscope, ship, iterate: one clear owner per feature, from prototype to production.
- Fundamentals done well: evaluation, observability, and safety are part of the first version, not an afterthought.
- Competitive salary and meaningful equity.
- Health, dental, and vision coverage.
- Flexible time off and support for experimentation, learning, and staying current with the AI ecosystem.
Staff Software Engineer - Security employer: Flow Engineering, Inc.
Flow is an exceptional employer that fosters a dynamic and innovative work culture, perfect for driven individuals looking to make a significant impact in the engineering sector. With competitive salaries, meaningful equity, and comprehensive health benefits, employees are supported in their professional growth while enjoying flexible time off to maintain a healthy work-life balance. Located in a fast-paced environment, Flow encourages ownership and experimentation, making it an ideal place for those eager to thrive in a cutting-edge AI-driven landscape.
StudySmarter Expert Advice🤫
We think this is how you could land Staff Software Engineer - Security
✨Join Local Tech Meetups
Get out there and mingle with fellow developers by joining local tech meetups. It’s a fantastic way to meet people who might be working at Flow Engineering, Inc. or know someone who does. Plus, you can pick up some trendy tech skills and trends while you're at it!
✨Contribute to Open Source Projects
Show off your coding chops by jumping into open-source projects. Not only does this give you practical experience, but it also gets you noticed in the dev community. You'll create a killer portfolio that speaks volumes about your skills to Flow Engineering, Inc..
✨Tap into Online Developer Communities
Don’t underestimate the power of online developer communities like GitHub, Stack Overflow, and even Reddit. Participate in discussions, share your projects, and build your visibility. We can often find opportunities through these channels that can lead to a full-time gig at companies like Flow Engineering, Inc..
✨Explore Job Boards Specifically for Tech Roles
Keep your eyes peeled on job boards that focus on tech roles. Sites like TechCareers or Stack Overflow Jobs can often have listings for companies like Flow Engineering, Inc. that might not show up on broader job sites. Make it a habit to check these regularly, and don’t hesitate to apply directly through our website!
We think you need these skills to ace Staff Software Engineer - Security
Some tips for your application 🫡
Show off your coding skills:When applying for a software engineering role, it's super important to showcase your coding skills. Make sure your CV includes your tech stack, any relevant programming languages you’re comfortable with, and examples of projects you've worked on. If you have a GitHub profile, link it up! We love to see code in action.
Tailor your portfolio:For a full-time role, we’d expect to see some solid examples of your work in your portfolio. Make sure to include at least two or three projects that highlight your problem-solving skills and your ability to work with different technologies. Focus on the projects that are most relevant to the position at Flow Engineering, Inc..
Craft a killer cover letter:Your cover letter is your chance to stand out—make it personal! Explain why you want to work at Flow Engineering, Inc. and how your skills align with the role. Show us your passion for software development. We dig enthusiastic candidates who understand the value of collaboration and continuous learning!
Be clear and concise:When it comes to writing your CV and cover letter, clarity is key. Avoid jargon that could confuse us and stick to simple, direct language. Highlight your achievements with quantifiable results where possible, and keep everything easy to read. A well-organised application goes a long way!
How to prepare for a job interview at Flow Engineering, Inc.
✨Brush Up on Your Coding Skills
For a full-time software engineering role, it's crucial that we stay sharp with our coding abilities. Expect technical questions that might involve solving problems on the spot or discussing algorithms. Practise on platforms like LeetCode or HackerRank to get comfortable with the types of questions that often come up.
✨Know Your Tools and Frameworks
Make sure we’re well-acquainted with the tools and technologies listed in the job description. Familiarise ourselves with any specific frameworks or programming languages mentioned. If Flow Engineering, Inc. uses React or Node.js, for instance, be ready to discuss how we’ve used them in previous projects or coursework.
✨Showcase Your Projects
Bring along a portfolio that highlights our best work. This could be code samples, GitHub repositories, or any side projects we’ve built. Make sure we can talk through our thought process for each project, especially the challenges we faced and how we solved them—this shows our problem-solving skills in action.
✨Prepare for Behavioural Questions
While technical skills are key, full-time positions also require cultural fit. Be ready to discuss our previous experiences and how we handle teamwork, conflict, and deadlines. Brush up on the STAR method—Situation, Task, Action, Result—to clearly articulate our past experiences when discussing how we've contributed to a team.
