Security
Cloud and Identity Security Engineer
Full-timeRemoteReports to: Product Security Manager
Secure our cloud, our identities and every login our agents use, and lead detection and response.
ApplyAbout SpareBrains
SpareBrains helps small and medium-sized businesses run better. A team of people and AI agents does real work for them. It finds where they’re losing customers online, fixes it, and keeps it running week after week. Our agents work inside our clients’ own accounts and tools, always with the owner’s approval. That makes trust the heart of what we sell.
The role
Named logins, access tokens and least privilege for every client are where our biggest risks live. You’ll secure our cloud and identity systems, so every agent and person has only the access they need. For now, you’ll also own detection and response.
What you’ll do
Cloud
- Map our current setup into a baseline and a ranked list of fixes.
- Harden access control, secrets and the separation between environments.
- Build secure defaults into our infrastructure code.
Identity
- Secure the OAuth links between our agents and clients’ accounts.
- Route access for people and agents through one sign-in system, not one by one.
- Keep each client’s keys and agent access isolated.
Detection and response
- Own security logging, detection rules and alerts.
- Lead incident response, and write the reviews after.
- Build tools that sort alerts, with a person approving actions.
What you’ll bring
- 5+ years in security or infrastructure engineering, with time in cloud security or identity.
- A major cloud provider, Terraform and containers.
- OAuth 2.0, OIDC, SAML and SCIM.
- Python or Go.
- Real incident response experience.
You don’t need every item on this list. If the work excites you, apply anyway.
Nice to have
- AI and agent security, including what happens when untrusted input, sensitive data and outside actions meet in one system.
- Automating SOC 2 or ISO 27001 evidence.
What we offer
A competitive base salary, equity, and the chance to build SpareBrains from its first day.
How to apply
Send your name, your email and your resume, with links to your work if you like. No cover letter needed.
ApplyInterview process
- Intro call. 30 minutes with our founder on the role, your work and your questions.
- Role interview. A deeper conversation about how you’d do the job, and the work you’ve done.
- Working session. We work through a real problem together, with any tools you like, AI included.
- References and offer. We speak to people you’ve worked with, then send the offer in writing.