Who you are

• Hands-On Engineering Background: Experience as a Software Engineer, Operations Engineer, or SRE. You’ve built and run systems yourself, and can meet engineers where they are. You Know Your Shit
• Secure SDLC Experience: Proven ability to implement and maintain CI/CD systems that integrate security controls (SAST, DAST, dependency scanning) and effect shift-left principles
• Cloud-Native Security Expertise: Comfortable making or guiding changes in AWS (IAM, authentication, API, and database security), with an understanding of their operational and compliance implications
• Exceptional Stakeholder Management: Clear, empathetic communicator who can influence peers, collaborate across disciplines, and partner effectively with both technical and non-technical teams. You Show Up with Style
• Metrics-Driven Approach: Ability to define, measure, and communicate progress through metrics that translate data into action and accountability
• Supporting PCI, SOC 2, or HIPAA compliance efforts
• You’ve been a hands-on engineer with experience in multiple programming languages
• Security program management or external auditor engagement
• Building automation or tooling for vulnerability management and compliance resolution

What the job involves

• We’re hiring a Staff Security Engineer to shape the foundation of Security Engineering at Boulevard
• You’ll drive the security of systems at scale, influence security strategy across engineering, and partner with leaders to align security with business outcomes. This role blends hands-on work where you will Make an Impact, Acting Like an Owner to integrate security into our SDLC and take a shift-left first approach that makes it easy for engineers to Do The Right Thing
• Reporting to the Director of Cloud & Reliability, this is a rare opportunity to lead and define what 'secure by default' looks like for a modern, cloud-native SaaS platform. You’ll help us build a culture where security empowers developers, embedding best practices, automation, and observability into every layer of our systems. This is a hands-on role with opportunities for growth
• The Cloud & Reliability group operates on four foundational principles
• Reliable Infrastructure - a foundation of stability, and security
• Developer Productivity - empowering builders to do the right things
• Clear ownership - accountability aligned with ownership. Collaboration, not silos
• Long-term Focus - we engineer for tomorrow
• Found the Security Engineering Function: Establish Boulevard’s dedicated security engineering program, define metrics, processes, and tooling that embed security into our SDLC and engineering culture
• Shift-Left Security: Integrate SAST, DAST, and dependency scanning into our CI/CD pipelines to surface issues early, enabling engineers to remediate vulnerabilities before production
• Security Metrics & Visibility: Develop measurable success criteria for our security posture. Establish a vulnerability management program which tracks and reports on vulnerability management, CVE resolution rates, and SDLC compliance
• Prioritize for Impact: Create and maintain a roadmap and backlog of security improvements, focusing effort where it makes the greatest difference to Boulevard’s reliability and compliance posture
• Regulatory & Data Protection Readiness: Build a deep understanding of Boulevard’s PCI and HIPAA environments, sensitive data flows, and controls, ensuring our systems meet compliance requirements without adding unnecessary friction
• Engineering Enablement: Partner with software, platform, and infrastructure teams to integrate security best practices directly into their workflows making it easy to build secure systems
• Hands-On Security Implementation: Not just identifying risks. You’ll actually implement solutions, improve CI/CD pipelines, and strengthen AWS infrastructure security through code, automation, and collaboration
• Measure & Improve Security Maturity: Continuously evaluate Boulevard’s security posture against defined metrics and identify opportunities to reduce risk and improve developer experience
• Define and Execute on a Security Strategy: Lead and help define a comprehensive security strategy, executing on the tactics to establish a world-class approach to security. You’ll shield us from threats, hunt for vulnerabilities, advocate for security awareness, react to incidents when they occur, and assist in compliance activities
• Compliance Support: Collaborate with compliance and operations teams to automate evidence gathering and strengthen controls across PCI, SOC 2, and HIPAA frameworks
• Scale Through Leadership: As the company grows, evolve this role into a Security Engineering Lead position building and mentoring a team to scale Boulevard’s security capabilities

Benefits

• Premier Health Benefits - 100% coverage plan options from Blue Shield of CA, Beam, and VSP
• Flexible Vacation & PTO
• Quarterly Bonus - Get rewarded when we reach our revenue targets
• 401k Match
• Boulevard Bucks - Get $200 to experience a Boulevard partner or self-care provider every quarter
• $250 upon signing and $75 monthly for your home workspace
• Fully Remote