Senior Security Engineer

About Levelpath:

Founded in 2022 and backed by some of the top venture capital firms in the Silicon Valley, Levelpath is on a mission to revolutionize the modern procurement software industry to dare we say… make it delightful. No matter the business size or needs, our platform simplifies the procurement process for everyone in the organization, making enterprises faster, safer, and more transparent.

At Levelpath we believe growth happens outside your comfort zone and that we live up to our full potential when we're challenged, and in an environment where everyone is driven to solve problems that haven't been solved.

Engineering at Levelpath:

We're looking for a experienced Senior Security Engineer to elevate and lead our security initiatives. This role is central to maturing Levelpath's security posture, helping us safeguard infrastructure, ensure compliance, and maintain the trust of our customers.
You will work closely with Engineering, DevOps, and Compliance teams to establish best-in-class security programs—from policy definition and incident response to tool implementation and secure development practices.

This position is hybrid/remote with flexible working hours and office in Teodors /Jaunā Teika. In this role you will have the opportunity to be a part of an international team and an agile environment with short decision paths. We currently use Slack, Zoom, Github, AWS, but you may leverage any devices and tools that allow you to do your best work.

What You Will Do:

• Lead the design and implementation of security and compliance frameworks and internal policies

• Drive incident response efforts and lead investigations of potential breaches

• Manage vulnerability assessment workflows and oversee mitigation planning

• Oversee the implementation and maintenance of security tools such as SIEM, DLP, SAST/DAST, and identity & access management solutions

• Collaborate with Engineering and DevOps to bake security into CI/CD pipelines and infrastructure

• Guide and participate in customer-facing security reviews, audits (e.g., SOC 2, ISO 27001), and risk assessments

• Conduct security architecture reviews and data flow mapping from a risk and compliance perspective

• Manage the bug bounty program and coordinate with external researchers

• Deliver security awareness training and foster a culture of proactive risk management across the organization

What you Bring to the Table:

• Proven experience in leading cybersecurity programs at a tech-focused organization

• Strong understanding of security operations, tooling, and secure development life cycles

• Knowledge of regulatory frameworks and audit practices (SOC 2, ISO 27001, GDPR, etc.)

• Hands-on experience with industry-standard tools and platforms (e.g., Vanta, CrowdStrike, Splunk, Rapid 7, Snyk)

• Comfortable participating in customer security reviews and communicating complex concepts clearly

• Effective team collaborator who can also work independently and drive initiatives to completion

• Excellent English communication skills both verbal and written

• Enjoys working in a team and helping each other

Levelpath is committed to equal treatment and opportunity in all aspects of recruitment, selection, and employment. We work hard to evaluate all employees and job applicants consistently, without regard to race, color, religion, gender, national origin, age, disability, pregnancy, gender expression or identity, sexual orientation, citizenship, or any other legally protected class. We're working to build a more inclusive economy where our customers have equal access to opportunity, and we strive to live by these same values in our workplace