Security Engineer

About PermitFlow

PermitFlow is redefining how America builds. As an applied AI company serving the nation’s builders, we tackle one of the largest information challenges in the economy. Our AI agent workforce helps construction companies navigate permitting, licensing, inspections, and project closeouts – accelerating housing, clean-energy, and infrastructure development.

Role Overview

Join our growing platform team as a Security Engineer at PermitFlow. You will build, scale, and fine-tune the systems that keep our platform secure and compliant. Your responsibilities include architecting security backbones, coding across the stack, and maintaining comprehensive security practices.

What You'll Do

• Architect and implement secure, scalable infrastructure solutions.
• Lead SOC2 compliance and other security certification programs.
• Design and audit RBAC, IAM, and secrets management systems.
• Develop secure CI/CD pipelines and security automation tools.
• Implement security monitoring, threat detection, and vulnerability management.
• Collaborate across engineering teams to embed security practices.

What We're Looking For

• 5+ years in Security Engineering, AppSec, GRC or similar roles.
• Experience with SOC2, ISO 27001, and compliance frameworks.
• Expertise in RBAC, IAM, container security, and cloud environments (GCP preferred).
• Proficiency in coding/scripting (TypeScript, Python, Go, Bash, etc.).
• Experience with secure CI/CD, security automation, and incident management.

What We Offer

• Competitive salary and meaningful equity in a high-growth company.
• Comprehensive medical, dental, and vision coverage.
• Flexible PTO, paid family leave, and home office stipend.
• Hybrid NYC office culture with in-office lunches and dinners provided.

Key skills/competency

Security, Compliance, SOC2, RBAC, IAM, Automation, Cloud, CI/CD, Incident, Infrastructure