Security Engineer at Forge / Polemos

About Poetic Poetic (formerly known as Forge) is creating the next layer of human-computer interaction - combining the intelligence of AI with the reliability of software. We automate the most complex manual processes for the world's largest enterprises using a new English programming language that blends structured control flow with natural language instructions. Processes that once took hours can now be completed in a fraction of the time at superhuman quality. Poetic is deployed globally, powering critical workflows for Fortune 500 companies with 98%+ quality across over half a million production runs. About the Role You’ll be Poetic’s first dedicated security-focused owner – the person who takes end-to-end ownership of our security posture across the company – in our core product, corporate security, and information security. This isn’t an advisory role. You’ll spend a meaningful portion of your time building: internal tooling, secure-by-default workflows, and a more secure product from the inside out. We need to move as fast as possible as securely as possible, and this role is the core of ensuring we can do both at once. We see security as enabling us to move faster Poetic’s runtime executes complex AI workflows against sensitive enterprise data – financial records, insurance claims, telecom operations – across distributed environments that span our cloud and customer infrastructure. The security surface is broad and genuinely interesting: multi-tenant isolation, data pipelines that touch regulated industries, cross-VPC deployment topologies, large-scale LLM code generation that needs to be monitored, and a runtime that needs to be auditable at every layer. Responsibilities Lead product security: threat modeling, secure code review, vulnerability management, and building security into the development lifecycle – not bolting it on after the fact. Build internal security tooling that makes secure-by-default behavior the path of least resistance for the rest of the engineering team. Automate the guardrails so engineers don’t have to think about them. Harden the infrastructure that underpins Poetic’s runtime – from multi-tenant isolation and secrets management to network boundaries and data handling pipelines that touch regulated customer environments. Communicate with customer security teams – ensure and communicate our security posture and architecture to ensure they are at the standards our enterprise customers expect. Be the internal voice on security: help the team understand tradeoffs, find paths that satisfy both security and velocity, and communicate clearly with stakeholders at all levels. You’ll build trust by being helpful, not by being a gate. Work closely with our external IT and Security partners, ensuring smooth day-to-day operations and appropriate controls. Own day-to-day compliance programs – including SOC 2 and PCI – as the internal DRI, working closely with our external compliance and audit partners. You May Be a Good Fit If