Senior Platform Security Engineer at Monaco

<p style="min-height:1.5em">Monaco is building an AI-native revenue platform that replaces the fragmented GTM stack (CRM, sequencing, call recording, enrichment, pipeline management) with one unified system. We’re consolidating 6–10 disconnected tools into a single, purpose-built platform and redefining what’s possible when all the data lives under one roof in the age of AI - this is a category-defining shift, not an incremental improvement.</p><p style="min-height:1.5em"><br />We launched publicly in Feb 2026 and are 50 people and growing. We have strong early product-market fit, creating millions in ARR in only a few months post-launch. Opportunities exist in both scaling core systems and workflows, and building new cutting edge features from 0 to 1.</p><p style="min-height:1.5em"><br />We’ve raised $85M through our Series B from legendary investors including Founders Fund, Benchmark, and Human Capital. Our founders are industry veterans who previously led companies like Brex, Apollo, and Clari.</p><p style="min-height:1.5em"><br />Come join us if you want to be part of a high autonomy, high pace team reinventing one of the biggest categories in enterprise software.</p><p style="min-height:1.5em"></p><h2><strong>The Role</strong></h2><p style="min-height:1.5em">You'll own the security posture of the entire platform that Monaco runs on, and a great deal of the Monaco product itself - and you'll get to define it from first principles, not retrofit it onto legacy debt. This is a rare wear-many-hats role that spans company-wide compliance, secure system design across both product and infrastructure, software supply chain security, and the hands-on evaluation and extension of our core systems for defense in depth. You'll be the person who makes "secure by default" the path of least resistance for a fast-moving engineering team handling sensitive revenue data at scale.</p><h2><br /><strong>What You'll Do</strong></h2><ul style="min-height:1.5em"><li><p style="min-height:1.5em"><strong>Own company-wide compliance.</strong> Drive our compliance program (SOC 2 and beyond) end-to-end with Vanta, turning controls into automated, continuously-verified guardrails rather than point-in-time checkbox exercises.</p></li><li><p style="min-height:1.5em"><strong>Lead secure system design.</strong> Set the bar for secure-by-default architecture across product and infrastructure - threat modeling, least privilege, secrets management, encryption, and defense in depth baked into how we build.</p></li><li><p style="min-height:1.5em"><strong>Secure the software supply chain at scale.</strong> Own dependency and container image scanning, artifact integrity, vulnerability response SLAs, and CI/CD pipeline hardening across a multi-account, GitOps-driven environment.</p></li><li><p style="min-height:1.5em"><strong>Re-architect core infrastructure for security.</strong> Evaluate and harden our key systems — VPCs and network segmentation, Kubernetes, and databases - for stron