Lead Security Engineer

Raptive is a media company serving creators, publishers, advertisers, and audiences through advertising management, monetization, and business solutions. The Lead Security Engineer will lead the security engineering capability, owning the security program end to end while partnering with SRE, product, and engineering to secure applications, platforms, and infrastructure. The role combines hands-on technical leadership with strategy, risk management, security assurance, and organizational enablement.

Responsibilities:

• Own the security program end to end: establish strategy, architecture, policies, risk management, operating cadence, and a prioritized roadmap with measurable outcomes
• Work side by side with SRE to design, implement, and operate secure cloud and infrastructure foundations, including identity and access controls, vulnerability management, configuration assurance, logging, detection, and incident readiness
• Partner with engineering teams to improve application and product security through secure design, threat modeling, security reviews, testing, and practical remediation guidance
• Lead security assurance activities, including third-party risk, security awareness, audits, and compliance efforts such as SOC 2, while keeping the focus on effective controls rather than checkbox compliance
• Coach and enable engineers, SREs, and business partners to make sound security decisions. Establish clear ownership and raise the organization’s security capability over time
• Communicate security vision, risk, tradeoffs, progress, and tactical delivery clearly to executives and stakeholders. Translate technical findings into business impact and specific decisions or actions
• Ensure consistency and alignment across application and platform security controls driving unified standards, shared tooling, and integrated posture outcomes for the enterprise
• Drive shift-left integration of security into the SDLC in partnership with Engineering and Product including threat modeling and secure design reviews
• Mature Raptive’s vulnerability management and remediation orchestration practices including triage workflows, risk-based prioritization, SLA tracking, and integration with engineering workflows
• Represent the Security Engineering function across the broader organization and influence roadmap decisions, resource allocation, and security investment priorities

Requirements:

• Demonstrated experience owning significant parts of an information security program and delivering both strategic improvements and hands-on technical work
• Broad security experience across cloud, infrastructure, application, data, identity, and corporate environments, with depth in several of those domains
• Experience working closely with SRE, platform, and software engineering teams to build security into operational practices and delivery workflows
• Strong technical judgment in security monitoring, vulnerability management, incident response, security architecture, and risk-based prioritization
• Success operating in a fast-moving, resource-conscious environment where priorities shift, process is still being built, and you are expected to take initiative
• A clear, credible communication style and experience presenting security strategy, risk, and delivery status to executive audiences
• A collaborative player/coach mindset: willing to do the work directly, raise the bar for others, and hold yourself accountable for outcomes