Lead Security Engineer

<h2><strong>About Us:</strong></h2> <p><strong data-stringify-type="bold"><em data-stringify-type="italic">Liberate builds AI agents to automate manual tasks for the $2.7T insurance industry. We started with voice — the hardest and most valuable channel in insurance — and are now expanding into full workflow automation across sales, servicing, and claims. Our long-term vision is to build reasoning agents capable of handling the entire spectrum of insurance carrier and broker operations. We've raised $72M to date, including a $50M Series B in October 2025, backed by top-tier venture firms.</em></strong></p> <p><strong>Location:</strong> Boston or Bay Area, hybrid preferred (2x/week in office)</p> <p><strong>Reporting:</strong> VP Engineering, dotted line partnership with CPO, and Customer Success leadership</p> <p><strong>Mission</strong><strong><br></strong>Make Liberate’s product measurably safer and compliant as we scale agentic workflows. Build security and compliance guardrails, engineering practices, and technical controls so we can ship fast without turning normal mistakes into P0 incidents or compliance failures.</p> <p><strong>What you will do</strong></p> <h3><strong>Product security and architecture</strong></h3> <ul> <li>Own product security end to end, including threat modeling, secure design reviews, and high risk architecture decisions.</li> <li>Build secure SDLC practices that engineers actually follow, including security requirements, CI checks, security test coverage, and safe defaults.</li> <li>Drive multi tenant and data boundary safety, including secrets handling, key management patterns, and blast radius reduction.</li> <li>Partner with Engineering leaders to make security part of how we build, not a separate lane.</li> <li>Influence roadmap tradeoffs with clear risk framing and concrete mitigations.</li> </ul> <h3><strong>Compliance and risk management&nbsp;</strong></h3> <ul> <li>Own SOC 2 and related compliance programs end to end, including control design, implementation, and ongoing effectiveness.</li> <li>Ensure compliance requirements are translated into real technical controls and engineering workflows, not manual or checklist driven processes.</li> <li>Partner with Engineering, Product, and Ops to embed compliance controls into systems, CI pipelines, and defaults.</li> <li>Lead audits and external reviews with a strong internal posture, clear ownership, and minimal disruption to engineering teams.</li> <li>Use tools like Vanta as leverage, not as the job.</li> </ul> <h3><strong>Incident readiness and vulnerability mana