Roles we place / Infrastructure & security / Security Engineer
Cadre is the boutique recruiting firm high-growth startups use to hire security engineers. Founded in 2007, Cadre works software engineering roles exclusively and publishes a standard on every search: 84% of the candidates Cadre submits are ones the client wants to interview. Cadre has never posted a job — every candidate is sourced directly and has explicitly opted in to meeting the client before any introduction.
Startup security engineering is a builder’s role, and the first security hire is its highest-leverage form: one engineer who sets cloud posture, identity and access, and product-security review before the habits calcify. The profile that thrives is an engineer-first pragmatist — someone who writes code, automates the SOC 2/ISO drumbeat that enterprise deals demand, and knows which risks matter this quarter versus which are theater. Most companies make this hire late, after procurement or an incident forces it, and by then the fix costs a rearchitecture instead of a review. AI added a whole new attack surface — prompt injection, model supply chain, data leakage through embeddings and logs — and enterprise buyers now ask about AI security in procurement, which makes the role revenue-relevant, not just risk-relevant. Security engineers fluent in LLM-era threats are the scarcest profile in the discipline, because the threats are younger than anyone’s resume.
| Level | Typical range (base) | Median |
|---|---|---|
| Mid-level | $160k – $205k | $185k |
| Senior | $195k – $255k | $225k |
| Staff+ | $245k – $315k | $275k |
Ranges reflect our current live searches. The historical receipts — base-salary data from Cadre placements since 2020, recorded at signed offer — are published at what our placements actually paid. Equity varies by stage; we’ll give you live market context on the call.
Almost always an engineer who can build — fractional leadership can cover strategy until scale demands more. A badge-heavy leader with no hands is the classic early mis-hire; we’ll help you avoid it.
It’s the thinnest pool in security and we work it continuously — practitioners who’ve secured LLM products, not just read about them. Expect to compete hard; the opt-in intro means they already chose you.
Usually within days. Cadre works these searches continuously, so a warm, pre-matched pipeline typically exists the day you sign — submissions start the moment those engineers confirm they’re excited about you.
Never — we’ve never posted a job since 2007. Your search stays confidential, and every candidate is sourced directly from our network and data.
If we don’t think we can hit our number on it, we’ll say so on the call.
Book a call