This isn't a role where security sits outside engineering and produces a list of findings. You'll work closely with our Platform and product engineering teams on GCP, GitHub, CI/CD, identity, infrastructure, application security, and production operations. You'll help design controls that are secure, pragmatic, auditable, and don't unnecessarily slow down the people building the product.

As our dedicated security specialist, you'll have significant scope to define how security works at Lantern and establish the standards and practices we use as the company grows.

What You'll Own

• Security posture and risk. Maintain a clear view of security risks across our applications, cloud infrastructure, endpoints, and third-party services, driving issues through remediation or documented risk acceptance.
• SOC 2 and audit readiness. Own day-to-day SOC 2 readiness, including controls, evidence, audit preparation, auditor requests, findings, and remediation.
• Security tooling and monitoring. Own Vanta and our security integrations, ensuring controls, tests, alerts, and underlying data remain accurate and actionable.
• Vulnerability management. Own vulnerability management across applications and infrastructure, including triage, remediation, penetration testing, and escalation of critical issues.
• Secure engineering and access. Work with engineering on secure software delivery, change management, IAM, privileged access, environment separation, and protection of customer data.
• Incident response. Own and continuously improve our security incident process, from identification and escalation through investigation, documentation, and remediation.
• Policies, vendors, and customer assurance. Maintain our security policies, oversee third-party security, and own responses to customer and prospect security questionnaires.
• Security governance. Provide clear security-risk updates to engineering and company leadership, turning findings into decisions, owners, and deadlines.

About You

• 5+ years of professional security experience, ideally in a cloud-native SaaS or technology environment.
• Hands-on experience securing AWS, GCP, or Azure environments and working directly with engineering teams.
• Experience owning or playing a significant role in a SOC 2 Type II programme, including controls, evidence, auditor interaction, and remediation.
• Experience with compliance or GRC platforms such as Vanta, Drata, or Secureframe.
• Strong understanding of vulnerability management, IAM, application security, secure software delivery, and incident response.
• Comfortable working with modern engineering environments including CI/CD, GitHub, infrastructure as code, and production cloud infrastructure.
• Pragmatic about security: able to distinguish genuine risk from a compliance checkbox and design controls that work in a fast-moving engineering environment.
• Able to communicate clearly with engineers, leadership, auditors, customers, and non-technical teams.
• Comfortable taking ownership where a process doesn't exist yet: defining it, implementing it, and making sure it continues to work.

What You'll Get

• Real ownership. Shape how security works at Lantern and build the standards, controls, tooling, and practices that support us as we grow.
• Security close to engineering. Work directly with the engineers building and operating the platform, solving problems rather than simply reporting them.
• Visible impact. Your work will directly influence our product, engineering practices, customer relationships, and ability to scale.
• A competitive package. A competitive salary and benefits package, including generous annual leave and other benefits appropriate to your location.