Cybersecurity Engineer

From bid to build to paid. From the office to the field to the entire company. Sledge is Construction AI.Sledge is the agentic, AI-native operating system for construction, handling the busywork of running a construction business so builders can spend more time building and less time on paperwork. Built for subcontractors and small to mid-size general contractors, Sledge is already live with a growing group of beta users.

Sledge already runs a recurring security meeting and takes it seriously, this role is what turns that into a real security practice.

Sledge is hiring a Cybersecurity Engineer to own security across the stack: the AWS infrastructure, the Next.js/Express web app, the Supabase/PostgreSQL data layer, and the Python/FastAPI AI system running alongside it. This role reports to Sledge's engineering team. Sledge already holds a recurring security meeting with its own Slack channel, and this role is what turns that into a real, ongoing security practice instead of a standing meeting.

Sledge handles contractor bids, payments, and business data, and that only gets more sensitive as Sledge grows. This is a build-and-defend role, not a compliance-checkbox role.

• Own security across Sledge's AWS infrastructure, web app, database, and AI system
• Run and drive Sledge's recurring security meeting, and turn what comes out of it into real fixes
• Set up and maintain security monitoring, logging, and alerting
• Review code and infrastructure changes for security risk before they ship
• Manage access control, secrets, and permissions across environments
• Own vulnerability management: finding issues, prioritizing them, and getting them fixed
• Support Sledge's data processing agreements, privacy policy, and other security-relevant commitments with real technical practice behind them
• Lead incident response if something does go wrong

• Required:
  
  hands-on experience securing production infrastructure on AWS
• Required:
  
  experience with application security, finding and fixing vulnerabilities in a real web app, not just theory
• Comfortable working across a Node.js/Type Script stack, a Python backend, and a PostgreSQL database
• Comfortable owning security end to end, not just running a scanner and filing tickets
• Comfortable moving at startup speed, without a large security team behind you
• A clear communicator who can explain risk to non-security people, including the founders

• Experience with SOC 2, data processing agreements, or similar compliance frameworks
• Experience securing AI or LLM-powered systems specifically
• Experience with penetration testing or red-teaming
• Interest or experience in construction, trades, or B2B software
• Experience building a security practice from scratch at an early-stage startup

• Fully remote, work from anywhere in the world
• Flexible hours, work when you're most productive
• Direct access to the founding team and engineering, no layers of management
• Real ownership over Sledge's security practice, built from the ground up
• You set the standard, not follow one someone else already set

Sledge is an equal opportunity employer. Sledge welcomes applicants of every background and does not discriminate on the basis of race, color, religion, sex, national origin, age, disability, or any other protected status.