Lead Engineer

Lead Engineer (Cyber security)

Our client is an AI security platform that acts as a security gateway between AI agents and databases. Ascompanies increasingly allow AI agents to interact directly with systems and data our client helps preventsensitive data exposure destructive queries compliance violations and operational mistakes. The platform inspects and controls database interactions in real time through policy enforcement threat detection and comprehensive audit logging. The product is already built and operational and the business is now entering its next phase of platform hardening product acceleration and go-to-market execution.

Role Overview

This is a founding-level technical leadership role with significant ownership and equity participation. The LeadEngineer will take ownership of the production codebase work closely with the founder and play a key role inhardening scaling and extending the platform.

Overall Candidate Profile

Our client is looking for high-calibre self-starting individuals who can operate with full ownership in a founder-led early-stage environment. The successful candidates should be motivated pragmatic ambitious and comfortable working closely with the founder during an intensive build-and-launch phase.

• Strong ownership mentality with the ability to work independently without constant direction.
• High integrity sound judgement and a practical problem-solving approach.
• Comfortable in a lean startup environment where priorities can move quickly.
• Able to contribute strategically while also remaining hands-on and execution focused.
• Preference for a small number of exceptional carefully vetted candidates over a high-volume shortlist.

Job Type: Full Time/Independent Contractor

Location: Cape Town

Work Place: Onsite

Requirements

• 8 years of software engineering experience.

• Strong TypeScript and Python experience.

• Solid PostgreSQL knowledge including the ability to work with complex database interactions.

• Experience with authentication OAuth API integrations and secure systems.
• Strong cloud experience with Google Cloud Platform (GCP) highly desirable.
• Comfortable taking ownership of a production codebase and making pragmatic technical decisions.
• Startup-minded self-motivated and able to work independently alongside the founder.

Bonus Experience

• Cybersecurity experience.

• Fintech or payments experience.

• Database internals performance optimisation or secure data access expertise.

Tech Stack

Two web apps that work together: a Python/Flask marketing & database-protection site and a React TypeScript AI Gateway portal both backed by PostgreSQL. The ideal hire moves comfortably between Python and TypeScript someone strong in only one half will struggle.

The Three Services

Landing & DB Protection

• Python / Flask

• Landing pages pricing registration billing checkout database-protection login & dashboard.

• Jinja2 templates session auth bcrypt / TOTP.

AI Gateway Portal

• / Express React

• Manage AI agents security policies queries anomalies and database connections.

DB Protection Portal

• / Express React

• WORM backup management restore approvals ransomware protection audit logs.

Must-Have Skills

Backend Python / Flask

• Flask web framework

• Jinja2 server-side templates

• Session auth bcrypt TOTP / 2FA

• REST API design

• Gunicorn (production WSGI server)

Backend / TypeScript

• Express web server

• TypeScript throughout

• Drizzle ORM for database access

• Session handling & auth

• REST API design

Frontend React

• React 18 TypeScript

• Vite build tool

• Tailwind CSS shadcn/ui

• wouter client-side routing

Database PostgreSQL

• PostgreSQL (AWS RDS in production)

• Schema design & migrations

• Drizzle ORM

• Indexing & query performance

Good to Have

AWS Infrastructure

• ECS Fargate

• ECR

• ALB

• Route53

• ACM

• CodeBuild

• Secrets Manager

• CloudWatch

• CloudTrail

• GuardDuty

Payments & Integrations

• Paddle (merchant of record)

• OAuth flows (Gmail Slack GitHub Salesforce)

• Resend (email)

DevOps

• Docker & Dockerfiles

• Terraform (20 infrastructure modules)

• CodeBuild CI/CD pipelines

Security Mindset

• Rate limiting

• Injection prevention

• Audit logging

• Reverse proxying between services

Nice to Have

AWS Infrastructure (Production)

• ECS Fargate

• ECR

• ALB

• Route53

• ACM

• RDS (PostgreSQL)

• CodeBuild

• AWS Backup

• Secrets Manager

• GuardDuty

• CloudWatch

• CloudTrail