安全工程师,产品安全
Security Engineer, Product Security
## 关于Cape
Cape是美国首家以隐私为首要考虑的移动运营商。我们的使命是在全球无线领域成为一股向善的力量。Cape由一群相信隐私是一项基本权利而非可被交易的奢侈品的人于2022年创立。我们的旅程始于创始人意识到现代世界中一个关键的漏洞:每个人都依赖相同的停滞不前的蜂窝基础设施和遗留系统,这些系统追踪我们的每一步行动,监控并分析我们的联系,丢失并出售我们的个人数据。
我们没有接受现状,而是决定加以改进。国家安全专家、记者、家长以及各类人群都可以保持连接并拥有隐私。
我们不仅仅是在旧技术之上构建一层;我们从零开始打造了美国最私密和安全的移动运营商。通过从零开始构建自己的网络,我们能够设计并构建一套其他任何运营商都无法提供的隐私和安全功能。
如今,Cape为消费者、企业和政府机构提供安全的网络。我们在2026年3月完成了C轮融资,并正在迅速扩展,目标是让人们重新掌控自己最私密的信息。
## 团队
在Cape,我们是隐私驱动运动的建筑师,这一运动才刚刚起步。我们是不懈的建设者,不断在电信领域的可能性边缘进行创新。我们以高度信任和高标准为基础运作。我们的结构是扁平化的,协作比等级制度更重要。作为我们团队的一员,你将与世界级的工程师、架构师和先驱者合作,并跨越组织界限解决“不可能”的问题,每天为我们的用户交付关键任务成果。
## 职位
我们正在寻找一位在产品安全方面有专长的经验丰富的安全工程师加入我们的团队。作为战略合作伙伴,你将通过在云和应用安全方面的专业知识立即产生影响。这个职位对于降低我们在AWS云环境、移动核心基础设施和移动应用中的风险至关重要。你将负责设计、实施并符合监管标准,增强内部流程,减少数据安全风险。通过开发持续的安全策略和技术,你将支持组织的业务目标和日常运营。
## 你将负责
查看英文原文
## **About Cape**
Cape is America’s privacy-first mobile carrier. Our mission is to be a force for good in global wireless. Cape was founded in 2022 by people who believe privacy is a fundamental right, not a luxury to be traded away. Our journey began when our founder recognized a critical vulnerability in our modern world: everyone relies on the same stagnant cellular infrastructure and legacy systems that track our every movement, monitor and profile our connections, and lose and sell our personal data.
Instead of accepting the status quo, we decided to fix it. National security professionals, journalists, parents, and everyone in between can stay connected _and_ have privacy.
We didn’t just build a layer on top of old tech; we built America’s most private and secure mobile carrier from the ground up. By building our own network from scratch, we are able to design and build a suite of privacy and security features that no other carrier on the planet can offer.
Today, Cape provides our secure network to consumers, businesses, and government agencies alike. We closed our Series C in March 2026, and we are scaling rapidly, with the goal of giving people back control of their most personal information.
## **The Team**
At Cape, we are the architects of a privacy-centric movement that is just getting started. We are relentless builders, constantly innovating at the edge of what's possible in telecommunications. We operate on a foundation of high trust and high expectations. Our structure is flat, and collaboration matters more than hierarchy. As a member of our team, you will collaborate with world-class engineers, architects, and visionaries, and work across organizational lines to solve "impossible" problems and deliver mission-critical results for our users every single day.
## The Role
We are seeking an experienced Security Engineer with a specialization in product security to join our team. As a strategic partner, you will make an immediate impact by leveraging your expertise in cloud and application security. This role is pivotal in reducing risk across our AWS cloud environments, mobile core infrastructure, and mobile applications. You will be responsible for designing, implementing, and that comply with regulatory standards, enhance internal processes, and minimize data security risks. Through developing ongoing security strategies and technologies, you will support the organization's business objectives and daily operations.
## What You'll Work On
- Design, implement, and manage robust security controls and policies within AWS, focusing on the confidentiality, integrity, and availability of data and services.
- Perform comprehensive security assessments of our cloud environments to identify vulnerabilities, assess risks, and recommend actionable mitigation strategies.
- Lead the integration of security practices into the DevOps lifecycle, promoting secure development, deployment, and operational processes.
- Utilize and optimize AWS security tools (such as Amazon GuardDuty, Amazon Inspector, AWS IAM, AWS KMS, AWS WAF, and AWS Shield) and explore third-party solutions to bolster our security posture.
- Assist in running and address findings from penetration tests and security audits, and ensuring prompt and effective remediation.
- Stay informed about the latest security threats, vulnerabilities, and compliance mandates affecting cloud environments, provide strategic guidance on technologies and best practices.
- Provide expert mentorship to junior security team members and engineers across the company, to foster an organizational culture of security awareness and continuous improvement.
- Collaborate with stakeholders to integrate security requirements effectively into engineering projects and broader business initiatives.
## Experience
- Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent experience), Advanced degrees or certifications (e.g., CISSP, AWS Certified Security Specialty) are advantageous.
- A minimum of 5 years of experience in information security, with at least 3 years concentrated on cloud security within AWS environments.
- Deep understanding of AWS architecture, security services, and best practices for securing cloud applications and data.
- Proficiency in using infrastructure as code (IaC) tools (like Terraform or AWS CloudFormation) and in automating security tasks within AWS.
- Skilled in scripting languages (Python, TypeScript, Go) for the automation of security tasks and the integration of security tools.
- Familiarity with containerization and microservices, particularly in securing stacks using these technologies.
- Solid knowledge of network security, encryption technologies, and secure coding practices.
- Excellent analytical skills for identifying and mitigating complex security vulnerabilities and risks.
- Strong communication and leadership abilities, capable of working collaboratively across teams and effectively conveying technical information to non-technical stakeholders.
- Organized and able to manage multiple priorities in a dynamic, fast-paced environment.
### **Competencies**
**Role competencies**
- **Security Expertise:** Experience finding and resolving security issues and vulnerabilities in code. Bug Bounty programs. Secure by design principals and working with engineers during design time.
- **Analytical:** Collects data and information; uses critical thinking to solve problems and make sound decisions.
- **Collaboration & Teamwork:** Builds partnerships with others to reach common goals. Able to share credit with coworkers, display enthusiasm and promote a friendly group working environment. Works closely with other departments as necessary, supports group decisions and solicits opinions from coworkers.
- **Communication:** Presents information through verbal and written communication; reads and interprets complex information; listens well. Develops and delivers multi-mode communications that convey clear understanding of unique audiences.
- **Decision-Making:** Acts quickly to solve problems and exercises good judgment by making sound and well-informed decisions. Perceives the impact and implications of decisions; makes effective and timely decisions, even when data is limited.
- **Dependability/Self-Management:** Possesses the personal discipline and diligence necessary to keep commitments and to complete tasks. Is accountable for actions and outcomes. Makes effort to improve situations without explicit instructions; a self-starter who consciously manages his/her own time and resources.
- **Customer Centric**: Values the importance of delivering high quality, innovative service to employees; understands the needs of the client; responds promptly and is accessible to them; follows through on commitments in a timely manner; maintains positive, long-term working relationships; assumes ownership of process issues and takes appropriate steps to mitigate problems. Gets consistently high feedback from stakeholders. Raises hand to help.
- **Flexibility / adaptability**: Adjusts quickly to changing priorities, conditions, and challenges. Copes effectively with complexity and change. Is comfortable navigating ambiguity. Can handle business changes with ease and with a lack of frustration or feeling of defeat. Feels comfortable dealing with limited unknowns in an area they are well versed in.
- **Planning & Organization:** Manages multiple projects, determines project urgency in a meaningful and practical way, uses goals to guide actions, creates detailed action plans, and organizes tasks.
**Cape-specific competencies**
- Do Excellent Work
- Respect The Opportunity (each other, the user)
- Overshare
- Bias Towards Action
## Compensation
We offer competitive compensation that is **geo-adjusted** based on **your location**, along with meaningful equity so you share in the value you help create. Salary range for this role in New York, New York is $200,000-$255,000 depending on experience and interview performance.
Our benefits include:
- 401(k) match
- 100% coverage of medical, dental, and vision premiums for you and your dependents
- 12 weeks paid parental leave (for all parents, no waiting period)
- Stipends for
- Family-forming needs
- Gender-affirming care
- Unlimited PTO
## **Our Culture & Values**
- We hire excellent people, give them outsized responsibility, and trust them to execute. Every person at Cape has a proven track record of tackling hard problems and winning.
- We believe that personal privacy and national security are not at odds, and that they can be reconciled through strong technology.
- We believe companies exist to build awesome things and take care of the people who build them, so we offer top-tier healthcare, 401(k) matching, and a generous vacation policy that our team actually uses to recharge.
- We believe that a stronger company and a better product are built by people from all walks of life. We hire without regard to race, color, ancestry, religion, sex, national origin, sexual orientation, gender identity, age, marital status, disability, or Veteran status. If you are great at what you do, you belong here.
## **How to apply**
Click the link below to apply.
We reserve the right to make use of any unsolicited resumes received from outside recruiting agencies and / or individual recruiters without being responsible for payment of any fees asserted from the use of unsolicited resumes.
We are an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin, and without regard to disability or status as a protected veteran, or any other status protected by law.