The brands on your kitchen shelf are run by people doing extraordinary work that nobody sees.

We're building the platform they run on, and a brand they'll be proud to be part of.

Confido is the AI operating system that runs cash application, deductions, trade and planning in one place for CPG brands. That means Finance, Sales, and Ops finally work on the same number.

We’re trusted by 250+ brands managing $30B+ in revenue, including Daisy, OLIPOP, Simple Mills, Idahoan, and more. We've achieved best-in-class growth and recently raised a $55M Series B led by Insight Partners to accelerate our momentum.

If you want your work on shelves everywhere — and outsized ownership while you build — we'd love to meet you.

The Role

Every day, Confido processes remittances, deductions, retailer disputes, and trade spend for some of the fastest-growing brands in CPG. Our customers trust us with their bank data, ERP credentials, and retailer portal logins. We're hiring our first Security Engineer to make Confido the most trusted place for CPG brands to run their financial operations.

Your work will center on three areas:

Confido builds products with an eye for security — secure defaults in our infrastructure, CI/CD, and application code, so the safe path is the easy one.

Confido detects and responds to threats before they cause harm — visibility into what's happening across our cloud, apps, and vendors, and a clear plan when something goes wrong.

Security powers Confido's growth — a security and compliance program that helps us win and keep enterprise customers instead of slowing deals down.

This is a hands-on role. You'll work closely with our DevOps and product engineers and with engineering leadership. We expect you to form your own opinions about where our security program needs to go and then make it happen.

What You'll Do

Take stock of Confido’s product and ecosystem to drive the security roadmap

Build key security primitives that enable the engineering team to ship quickly and safely

Build the systems to enable proactivity in security management

Lead remediation of prioritized issues

Partner with the engineering team to deploy secure systems

What We're Looking For

5+ years of experience building software or production infrastructure

3+ years of hands-on security work in AWS, with infrastructure as code (Terraform or similar)

A working understanding of IAM, networking, Kubernetes, and secrets management

Ability to write and review code in Python, Ruby, TypeScript, or another language

A strong sense of ownership: you drive projects from inception through scaling them in production

The judgment to weigh real risk against shipping speed, and to explain that tradeoff clearly

Clear, concise written and verbal communication

Desire to work in a fast-paced environment, continuously grow, and master your craft

Nice to Have

Experience leading or supporting a SOC 2 or similar compliance program

Experience with systems that handle financial, payments, or other sensitive data

Application security experience with Ruby on Rails or React

Experience improving the developer experience and security properties of a multi-service deployment

Experience at an early-stage, high-growth B2B SaaS company

Our Stack

We care much more about strong fundamentals than experience with any particular tool, but today we primarily use AWS, Kubernetes, Docker, Terraform, PostgreSQL, Python, Ruby on Rails, TypeScript, OpenTelemetry, Grafana/Prometheus, and GitHub Actions.

🌴 Perks + Benefits

Equity — own a meaningful piece of the company you’re helping build

Fully paid health coverage through Aetna — we cover 100% of employee premiums

Top-tier dental and vision coverage through Guardian

Carrot Fertility Pro — comprehensive fertility and family-forming support

12 weeks of paid parental leave

Unlimited PTO — plus regular 4-day holiday weekends we actually take

401(k) through Vestwell

Paid relocation support — we’ll help you make the move to NYC

Fully equipped workspace from day one — laptop, monitor, keyboard, and a $200 stipend to personalize your setup