Security Engineer

About FSH

FSH Tech builds modern software that just works for the public sector. When we deliver, taxpayer dollars go further, agencies move faster, and millions of Americans get tangibly better service and quality of life.

Local governments, schools, libraries, and emergency services run on brittle software that was built decades ago. This results in wasted budgets, broken workflows, and bad outcomes for the public. We believe that the institutions closest to people's daily lives deserve products as good as anything in the private sector. We're building them.

We're a small, high-agency team. The people who do their best work here are:

• Relentlessly optimistic in creating a better world now

• Driven to maximize societal impact

• Brilliant and creative

About FSH Engineering

Our ideal candidate is an expert in their craft. They gain energy from understanding how their chosen tools work, and have used their tools to build software many times. Our ideal candidate is obsessively curious, motivated by customer outcomes, and is a technical artist.

We use Python, Postgres, Unix, TypeScript and React to build software. We maintain a set of internal tools to deterministically generate Python and Typescript. We obsess over how to build compounding advantages in tooling, software, and product.

About the Role

FSH builds software for governments, schools, and other NGOs. These institutions are deeply trusted with sensitive data by us all. We view this as a responsibility and an opportunity. Our architecture enables solving problems with deep attention to detail and customization for our clients — and we are looking for security and compliance minded engineers to construct and maintain FSH’s software and compliance posture with an eye for innovation.

Because of our approach, many traditional techniques (from pen testing to software auditing) need to be carefully adapted to suit our solutions. Relationships with auditors and security vendors need to be similarly reworked. We need to create a framework that fairly validates our posture, and then automate its continued use across many pieces of similar but unique software.

What You'll Do

• Build and maintain software for customers

• Seek and ingest feedback

• Iterate quickly

• Define engineering culture

What You'll Need (optional)

• Experience as a security engineer (e.g. handled SOC II or similar compliance processes, managed bug bounty programs, etc)

• [optional] Experience working with internal compliance officers or external auditors

• [optional] Experience shipping software to users

You’re the right person for the job if many of these are true:

• You believe programming is a creative pursuit

• You are a perennial tinkerer

• You gain energy from being close to the customer, always

• You are obsessed with focused learning

• You believe abstractions can simplify complexity

• You love pattern seeking

  • Modern inventory management is best handled through Venetian double entry accounting

  • Buddhist meditation and dialectical behavior therapy are closely related

  • The distribution of crater sizes on the moon follow a power law

  • Rivers and their tributaries, blood vessels, lunch bronchi, broccoli, and lightning bolts all demonstrate related patterns

Employees are expected to live in New York City or Philadelphia and work out of our office in either location.