SOFTWARE ENGINEER

The Iron Sheepdog is seeking a Lead Information Security & Compliance Specialist to spearhead our security initiatives and governance frameworks. The role requires bridging the gap between high-level compliance and hands-on technical security engineering, protecting our fintech workflows, and championing a security-first culture.

Key Responsibilities

• Compliance Leadership: Lead and manage the end-to-end process of achieving and maintaining our SOC 2 compliance.

• Policy & Governance: Create, enforce, and govern comprehensive IT and Information Security policies across the entire organization.

• Client Security Liaison: Serve as the primary security liaison for enterprise clients, confidently answering complex security questionnaires and navigating financial audits.

• Vendor Management: Interface directly with client security teams, respond to vendor security questionnaires, and optimize our IT Managed Service Provider (MSP) relationships to dictate how we best leverage them.

• Security Engineering: Act as a hands-on security engineer to review and improve secure coding practices across our React and Node.js codebase, ensuring the safety of our fintech workflows.

• Vulnerability & DevSecOps Management: Manage and monitor DevSecOps tools like Snyk to catch vulnerabilities early in the CI/CD pipeline.

• Testing & Infrastructure Security: Conduct internal penetration tests, review Firebase/Firestore security rules, and rigorously develop disaster recovery plans.

• AI Security Implementation: Design and execute vulnerability testing specifically for our AI features, running prompt injection tests against our LLMs and chat-bots to ensure data integrity.

• Security Culture: Take full ownership of company-wide security awareness training, actively building an internal culture of vigilance and security awareness.

Job Requirements & Skills

• Core Requirements (Must Have):

  • Experience managing/leading the end-to-end process of achieving and maintaining SOC 2 compliance, OR comparable/translatable audit and compliance frameworks (e.g., ISO 27001, HIPAA, PCI-DSS).

  • A proven background working within SaaS environments, with a strong preference for candidates experienced in logistics, supply chain, or short-haul trucking platforms (specifically dealing with truck routing and fleet dispatch).

  • Proven experience serving as a primary security contact for medium to large enterprises.

  • Strong exposure to secure processes for diverse, interconnected ecosystems across web, mobile, cloud infrastructure, and APIs.

• Technical & Next-Level Requirements:

  • Ability to work hands-on with React and Node.js codebases to implement secure coding practices.

  • Direct experience with DevSecOps tools (e.g., Snyk), CI/CD pipelines, internal penetration testing, and Firestore/Firebase security rule governance.

  • Experience or strong capability in running prompt injection tests and securing LLM-powered chatbots.

Why Iron Sheepdog?

• Transform a Legacy Industry: Be part of a team that is revolutionizing the massive, essential short-haul trucking industry.

• The Iron Sheepdog Standard: Experience a unique business model where industry-leading software is backed by a relentless commitment to personal service and operational excellence.

• High-Growth Environment: Experience the thrill of a scaling startup where your contributions are essential to our collective success.

• Innovation at the Core: Join a company that values "what’s next," where we use technology to solve real-world problems for hard-working people.

Total Rewards Package

• Competitive compensation and benefits package including salary, bonus, 401k, healthcare, dental, and PTO.

Equal Opportunity Employer

We are committed to providing an inclusive and welcoming environment for all and do not discriminate on the basis of race, color, religion, gender, gender identity, gender expression, sexual orientation, national origin, age, disability, veteran status, or any other characteristic protected by law.