Application Security Lead

ABOUT THE ROLE Hightouch is an Agentic Marketing Platform powered by the industry-leading Composable CDP. As a dedicated security hire, you'll own Hightouch's application security posture end-to-end. This is a rare chance to define the function from the ground up, shaping what security looks like here as we scale from 70 to 140+ engineers. You'll be solving hard problems at the intersection of security and distributed systems. WHAT YOU'LL DO You'll spend most of your time in the codebase, not in meetings, solving complex problems such as multi-tenant isolation, sub-tenant access control, security architecture, internet-facing APIs, and multi-region and multi-cloud security. You'll own your roadmap and identify the highest-leverage problems to tackle. This is a hands-on, high-autonomy role, requiring significant distributed systems expertise. WHAT YOU'LL NEED To succeed in this role, you should have experience as an early security hire at a SaaS company, securing multi-tenant platforms, cloud security, and designing and building data infrastructure. Relevant experience includes: - Being an early security hire (first 1-3) at a SaaS or data infrastructure company - Securing multi-tenant platforms: tenant isolation, authorization models, etc - Cloud security on systems that span more than one cloud and operate against customer-owned accounts - Design and build of data infrastructure as an early engineer, not just a user - Privacy-adjacent security (PII handling, data residency, GDPR/CCPA technical controls) WHY REMOTE Hightouch is a remote-first company, and this role is location independent. The salary range for this position is $180,000 - $400,000 USD per year, which reflects our commitment to flexibility and work-life balance. We also offer meaningful equity compensation in the form of ISO options, and an early exercise and a 10 year post-termination exercise window. BENEFITS Hightouch participates in E-Verify, but we never use E-Verify to pre-screen applicants. After you join the team, we'll verify your eligibility to work in the U.S. by submitting information from your Form I-9 to the Social Security Administration and, if needed, the Department of Homeland Security.