Staff Security Engineer

Come do the best work of your life at Boulevard.

We’re hiring a Staff Security Engineer to shape the foundation of Security Engineering at Boulevard.

You’ll drive the security of systems at scale, influence security strategy across engineering, and partner with leaders to align security with business outcomes. This role blends hands-on work where you will Make an Impact, Acting Like an Owner to integrate security into our SDLC and take a shift-left first approach that makes it easy for engineers to Do The Right Thing.

Reporting to the Director of Cloud & Reliability, this is a rare opportunity to lead and define what 'secure by default' looks like for a modern, cloud-native SaaS platform. You’ll help us build a culture where security empowers developers, embedding best practices, automation, and observability into every layer of our systems. This is a hands-on role with opportunities for growth.

 The Cloud & Reliability group operates on four foundational principles.

1. Reliable Infrastructure - a foundation of stability, and security.
2. Developer Productivity - empowering builders to do the right things.
3. Clear ownership - accountability aligned with ownership. Collaboration, not silos.
4. Long-term Focus - we engineer for tomorrow.

Key Projects & Initiatives

• Found the Security Engineering Function: Establish Boulevard’s dedicated security engineering program, define metrics, processes, and tooling that embed security into our SDLC and engineering culture.
• Shift-Left Security: Integrate SAST, DAST, and dependency scanning into our CI/CD pipelines to surface issues early, enabling engineers to remediate vulnerabilities before production.
• Security Metrics & Visibility: Develop measurable success criteria for our security posture. Establish a vulnerability management program which tracks and reports on vulnerability management, CVE resolution rates, and SDLC compliance.
• Prioritize for Impact: Create and maintain a roadmap and backlog of security improvements, focusing effort where it makes the greatest difference to Boulevard’s reliability and compliance posture.
• Regulatory & Data Protection Readiness: Build a deep understanding of Boulevard’s PCI and HIPAA environments, sensitive data flows, and controls, ensuring our systems meet compliance requirements without adding unnecessary friction.

What You’ll Do Here

• Engineering Enablement: Partner with software, platform, and infrastructure teams to integrate security best practices directly into their workflows making it easy to build secure systems.
• Hands-On Security Implementation: Not just identifying risks. You’ll actually implement solutions, improve CI/CD pipelines, and strengthen AWS infrastructure security through code, automation, and collaboration.
• Measure & Improve Security Maturity: Continuously evaluate Boulevard’s security posture against defined metrics and identify opportunities to reduce risk and improve developer experience.
• Define and Execute on a Security Strategy: Lead and help define a comprehensive security strategy, executing on the tactics to establish a world-class approach to security. You’ll shield us from threats, hunt for vulnerabilities, advocate for security awareness, react to incidents when they occur, and assist in compliance activities.
• Compliance Support: Collaborate with compliance and operations teams to automate evidence gathering and strengthen controls across PCI, SOC 2, and HIPAA frameworks.
• Scale Through Leadership: As the company grows, evolve this role into a Security Engineering Lead position building and mentoring a team to scale Boulevard’s security capabilities.

What You’ll Need to Thrive

• Hands-On Engineering Background: Experience as a Software Engineer, Operations Engineer, or SRE. You’ve built and run systems yourself, and can meet engineers where they are. You Know Your Shit.
• Secure SDLC Experience: Proven ability to implement and maintain CI/CD systems that integrate security controls (SAST, DAST, dependency scanning) and effect shift-left principles.
• Cloud-Native Security Expertise: Comfortable making or guiding changes in AWS (IAM, authentication, API, and database security), with an understanding of their operational and compliance implications.
• Exceptional Stakeholder Management: Clear, empathetic communicator who can influence peers, collaborate across disciplines, and partner effectively with both technical and non-technical teams. You Show Up with Style.
• Metrics-Driven Approach: Ability to define, measure, and communicate progress through metrics that translate data into action and accountability.

Bonus Experience:

• Supporting PCI, SOC 2, or HIPAA compliance efforts.
• You’ve been a hands-on engineer with experience in multiple programming languages.
• Security program management or external auditor engagement.
• Building automation or tooling for vulnerability management and compliance resolution.

How we’ll take care of you:  

Your starting total cash compensation for this role is between $181,125 and $258,750 depending on your current skills, experience, training, and overall market demands. This salary range is subject to change, and there is always room for growth and advancement