Why This Job is Featured on The SaaS Jobs
Corporate security is increasingly a differentiator in SaaS, especially for companies handling sensitive data and serving regulated customers. This role stands out because it targets the employee and vendor surface area that often becomes the limiting factor for shipping product safely, spanning identity, endpoints, email, and third party risk. With Cape building privacy and security into its offering and noting government facing use cases, the corporate security remit has direct implications for customer trust and operational readiness.
For a SaaS security career, the scope is notably cross functional: partnering with IT, engineering, HR, and legal while building repeatable controls and governance. The work maps closely to patterns seen across modern SaaS operators, including IAM standardisation, fleet vulnerability management, security awareness, and audit support. Experience here tends to translate well into security leadership tracks because it blends technical controls with risk prioritisation and stakeholder management.
This position fits practitioners who like owning systems end to end and turning ambiguous risk into concrete policies, tooling decisions, and measurable programs. It will suit someone comfortable balancing hands on incident work with longer horizon controls, and who prefers building durable security foundations across a remote, distributed corporate environment.
The section above is editorial commentary from The SaaS Jobs, provided to help SaaS professionals understand the role in a broader industry context.
Job Description
About Cape
Cape is America’s privacy-first mobile carrier. Our mission is to be a force for good in global wireless. Cape was founded in 2022 by people who believe privacy is a fundamental right, not a luxury to be traded away. Our journey began when our founder recognized a critical vulnerability in our modern world: everyone relies on the same stagnant cellular infrastructure and legacy systems that track our every movement, monitor and profile our connections, and lose and sell our personal data.
Instead of accepting the status quo, we decided to fix it. National security professionals, journalists, parents, and everyone in between can stay connected and have privacy.
We didn’t just build a layer on top of old tech; we built America’s most private and secure mobile carrier from the ground up. By building our own network from scratch, we are able to design and build a suite of privacy and security features that no other carrier on the planet can offer.
Today, Cape provides our secure network to consumers, businesses, and government agencies alike. We closed our Series C in March 2026, and we are scaling rapidly, with the goal of giving people back control of their most personal information.
The Team
At Cape, we are the architects of a privacy-centric movement that is just getting started. We are relentless builders, constantly innovating at the edge of what's possible in telecommunications. We operate on a foundation of high trust and high expectations. Our structure is flat, and collaboration matters more than hierarchy. As a member of our team, you will collaborate with world-class engineers, architects, and visionaries, and work across organizational lines to solve "impossible" problems and deliver mission-critical results for our users every single day.
The Role
We are seeking an experienced Security Engineer with expertise in corporate security to join our team. As a strategic partner, you will make an immediate impact by leveraging your expertise across identity, endpoint, network, and information security alongside IT, engineering, and business teams. This role is pivotal in reducing risk across our corporate environment, covering employee-facing systems, internal infrastructure, and third-party risk, and will be responsible for designing, implementing, and maintaining security measures that comply with regulatory standards, enhance internal processes, and minimize data security risks. Through developing ongoing security strategies, technologies, and a strong security culture, you will support the organization's business objectives and daily operations.
Responsibilities
Design, implement, and manage security controls and policies across corporate IT systems, focusing on the confidentiality, integrity, and availability of employee, customer, and business data.
Own and mature identity and access management (IAM/SSO/MFA), endpoint security (EDR, MDM), and email/network security (phishing defense, DLP, firewalls, VPN) across the organization.
Perform comprehensive security assessments of corporate systems and vendors to identify vulnerabilities, assess risk, and recommend actionable mitigation strategies.
Establish governance, guardrails, and monitoring for emerging employee tooling, including the associated data-handling, access, and third-party risks.
Own the vulnerability management lifecycle across the corporate fleet: scanning, risk-based prioritization, remediation and patch SLAs, and closure tracking across endpoints and internal systems.
Lead security awareness and phishing simulation programs to build an organization-wide culture of security.
Contribute to compliance and audit efforts as needed, lending security context where it helps the business move faster.
Assess and manage third-party/vendor security risk, including security questionnaires, contract reviews, and ongoing vendor monitoring.
Assist in running and addressing findings from penetration tests, red team exercises, and internal audits, ensuring prompt and effective remediation.
Stay informed about the latest security threats, vulnerabilities, and compliance mandates affecting corporate environments; provide strategic guidance on technologies and best practices.
Investigate security incidents and insider-threat concerns in partnership with HR, Legal, and IT as needed.
Raise the security bar across the company by mentoring engineers and partners on secure practices, fostering a culture of security awareness and continuous improvement.
Collaborate with stakeholders to integrate security requirements effectively into IT projects and broader business initiatives.
Preferred Experience
Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent experience). Advanced degrees or certifications (e.g., CISSP, GIAC, Security+, CISM) are advantageous.
A minimum of 5 years of experience in information security, with meaningful experience across corporate/IT security domains (identity, endpoint, network, GRC).
Deep understanding of enterprise identity providers and SSO/MFA platforms, endpoint/EDR tooling, MDM platforms, and email security tooling.
Working knowledge of common compliance frameworks (e.g., SOC 2, ISO 27001).
Familiarity with government/public-sector security frameworks (FedRAMP, FISMA, NIST SP 800 series, CJIS) is a plus, given Cape's government-facing customer base.
Working knowledge of consumer privacy regulations (GDPR, CCPA, and other regional privacy laws) as they apply to handling customer data.
Exposure to secure software development lifecycle (SSDLC) practices and partnering with engineering on secure design reviews.
Proficiency in scripting or automation (Python, shell scripting, or similar) to streamline security operations and reporting.
Familiarity with vendor/third-party risk management processes and tooling.
Solid knowledge of network security, encryption technologies, and secure business-system configuration.
Excellent analytical skills for identifying and mitigating complex security vulnerabilities and risks.
Strong communication and leadership abilities, capable of working collaboratively across teams and effectively conveying technical information to non-technical stakeholders.
Organized and able to manage multiple priorities in a dynamic, fast-paced environment.
Competencies
Role competencies
Security Expertise – Experience identifying and resolving security issues across corporate systems (identity, endpoint, network, and data). Secure-by-design principles, and partnering with IT/engineering during design time.
Analytical – Collects data and information; uses critical thinking to solve problems and make sound decisions.
Collaboration & Teamwork – Builds partnerships with others to reach common goals. Able to share credit with coworkers, display enthusiasm and promote a friendly group-working environment. Works closely with other departments as necessary, supports group decisions and solicits opinions from coworkers.
Communication – Presents information through verbal and written communication; reads and interprets complex information; listens well. Develops and delivers multi-mode communications that convey clear understanding of unique audiences.
Decision-Making – Acts quickly to solve problems and exercises good judgment by making sound and well-informed decisions. Perceives the impact and implications of decisions; makes effective and timely decisions, even when data is limited.
Dependability/Self-Management – Possesses the personal discipline and diligence necessary to keep commitments and to complete tasks. Is accountable for actions and outcomes. Makes effort to improve situations without explicit instructions; a self-starter who consciously manages his/her own time and resources.
Customer Centric – Values the importance of delivering high quality, innovative service to employees; understands the needs of the client; responds promptly and is accessible to them; follows through on commitments in a timely manner; maintains positive, long-term working relationships; assumes ownership of process issues and takes appropriate steps to mitigate problems. Gets consistently high feedback from stakeholders. Raises hand to help.
Flexibility / Adaptability – Adjusts quickly to changing priorities, conditions, and challenges. Copes effectively with complexity and change. Is comfortable navigating ambiguity. Can handle business changes with ease and without frustration or a feeling of defeat. Feels comfortable dealing with limited unknowns in an area they are well versed in.
Planning & Organization – Manages multiple projects, determines project urgency in a meaningful and practical way, uses goals to guide actions, creates detailed action plans, and organizes tasks.
Cape-specific competencies
We offer competitive compensation that is geo-adjusted based on your location, along with meaningful equity so you share in the value you help create. Salary range for this role in New York, New York is $200,000-$255,000 depending on experience and interview performance.
Our benefits include:
401(k) match
100% coverage of medical, dental, and vision premiums for you and your dependents
12 weeks paid parental leave (for all parents, no waiting period)
Stipends for
Family-forming needs
Gender-affirming care
Unlimited PTO
Our Culture & Values
We hire excellent people, give them outsized responsibility, and trust them to execute. Every person at Cape has a proven track record of tackling hard problems and winning.
We believe that personal privacy and national security are not at odds, and that they can be reconciled through strong technology.
We believe companies exist to build awesome things and take care of the people who build them, so we offer top-tier healthcare, 401(k) matching, and a generous vacation policy that our team actually uses to recharge.
We believe that a stronger company and a better product are built by people from all walks of life. We hire without regard to race, color, ancestry, religion, sex, national origin, sexual orientation, gender identity, age, marital status, disability, or Veteran status. If you are great at what you do, you belong here.
How to apply
Click the link below to apply.
We reserve the right to make use of any unsolicited resumes received from outside recruiting agencies and / or individual recruiters without being responsible for payment of any fees asserted from the use of unsolicited resumes.
We are an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin, and without regard to disability or status as a protected veteran, or any other status protected by law.
