{"id":4210675,"url":"https://alion.io/job/rho-staff-security-engineer","title":"Staff Security Engineer","company":{"id":174579,"name":"Rho","domain":"rho.co","url":"https://alion.io/company/rho-2","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":80,"open_postings":47,"ghost_share":0.34,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":40,"computed_at":"2026-11-12T10:38:37Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New York, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CodeQL","optional":false},{"name":"Dependabot","optional":false},{"name":"GCP","optional":false},{"name":"Google GKE","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"Python","optional":false},{"name":"Semgrep","optional":false},{"name":"SIEM","optional":false},{"name":"Terraform","optional":false},{"name":"PCI DSS","optional":true},{"name":"Red Teaming","optional":true},{"name":"SOC 2","optional":true}],"status":"live","first_seen_at":"2026-11-12T18:47:27Z","employer_posted_date":"2026-11-12","last_verified_at":"2026-11-13T00:55:24Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"About Us\nRho is the modern banking platform built for the AI era. Startups and growth-stage companies can open accounts in minutes, issue cards, manage expenses, pay bills, and close the books - all in one connected platform backed by real human support.\nAbout Us\n\nRho is on a mission to make finance frictionless for organizations. Our team and technology power high-performing companies with an all-in-one, end-to-end finance platform that lets organizations safely manage cash and spending across commercial-grade banking, corporate cards, treasury management, expense management, accounts payable, and more. \nOur customers run their banking, cards, and payments through Rho. We are splitting a large Python monolith into Go and Python services on GCP, and shipping a public API, agents, and MCP surfaces. Security is part of the product.\nThe Team\nSecurity at Rho is small: a VCISO, one security engineer in Poland, and the engineers who ship. You will be the first US security engineer. We plan to grow this into a team over the next six months, and you will help pick who.\nThe Role\nHands-on. You write production code most days. You own product and platform security, and you own finding queues and incident response until we hire for detection and response.\nWhat you'll do\nProduct Security\nThreat model new systems and review designs with the teams that own them before they ship.\n\nBuild the paved road: secure defaults, guardrails in CI, dependency and supply chain checks, so the safe way is the easy way.\n\nOwn the vulnerability lifecycle: triage findings from Pensar, Semgrep, CodeQL, Dependabot, pentests, and inbound researcher reports; hold the SLAs; write the fix or get it written; track remediation to zero. Stand up our vulnerability disclosure program.\n\nPlatform Security\nHarden GCP and GKE: least-privilege IAM, workload identity, secrets, network policy, environment separation, all in Terraform.\n\nSecure our LLM, agent, and MCP surfaces: guardrails, sandboxes, agents as identities with scoped access, prompt injection detection. \n\nDetection & Response\nOwn detections in our SIEM, tune signal to noise, keep the runbooks current, stand up on the call rotation, and lead incidents end to end: triage, contain, investigate, remediate, post-mortem.\n\nRun tabletop exercises and hunt for what detections miss.\n\nWhat we're looking for\n6+ years in security engineering, or software engineering with a security focus. You ship code and tools, not only findings.\n\nDepth in one of product security, cloud and platform security, or detection and response, and working knowledge of the other two.\n\nComfortable changing production and owning the outcome. Python or Go, Kubernetes, Terraform, one major cloud.\n\nYou can triage competing risks and trade security against velocity without slowing the team down.\n\nClear writer: design reviews, runbooks and incident reports engineers actually read.\n\nNICE TO HAVE\nFintech, payments or another regulated industry. PCI DSS or SOC 2 evidence work.\n\nBug bounty, red team, CVEs, talks, or open source.\n\nHands-on AI security: guardrails, agent identities, prompt injection.","description_format":"text","description_chars":3118,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cards & Card Issuing","Digital Banks & Neobanks"],"lifecycle":[{"event":"open","at":"2026-11-13T00:55:24Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":40,"reasons":["conf:1","win:early"],"computed_at":"2026-11-13T02:14:25Z"},"pay":null,"html_url":"https://alion.io/job/rho-staff-security-engineer","json_url":"https://alion.io/job/rho-staff-security-engineer.json","meta":{"generated_at":"2026-11-13T02:14:25Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4699,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":174579},"rest":"https://alion.io/mcp/rest/get_company?id=174579"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frho-staff-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frho-staff-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frho-staff-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/rho-staff-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frho-staff-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4210675}},{"tool":"search_jobs","arguments":{"company":"rho.co","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4210675},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}