The posting
Veo is an AI-powered sports camera and analysis ecosystem built for one job: turning what happens on a pitch into proof. Capture, viewing, data and analytics, sharing- all in one system, all pointed at the same thing.
That's bigger than football. Every player, on every pitch, gets access to the kind of proof only the top academies used to keep for themselves. It's the future we're building.
Every youth match still has a moment nobody saw. A run that won the game, underneath everyone's radar. A kid written off before anyone actually checked. We exist to close that gap, one match at a time.
One camera on any pitch feeds an AI that tracks every player and the ball for the whole game, turning what happened into evidence instead of somebody's opinion.
That's the actual job here. Not shipping features. Building the system that gives proof to someone who used to rely on a hunch.
If you've ever watched a match and wondered who else saw what you saw, you already know why this matters.
We're looking for people who want to build that future with us.
The Opportunity
Veo's security surface is unusual. We train models on-premise on dedicated GPU infrastructure, run the product across AWS and GCP, and operate a fleet of tens of thousands of cameras deployed at clubs and venues worldwide. That is a scope most SaaS security engineers never touch: physical devices in the field, heavy on-prem compute, and multi-cloud production, all in one role.
We are forming a Security Enablement Team that makes it easier for every engineering and IT team at Veo to build, ship, and operate secure systems. As the most senior engineer on the team, you will own the technical direction of the platform security, identity, and network security slice, partnering with the teams that own these systems so security is built in from the start. As an enablement function, the team does not run these systems day to day. We build the paved roads, tooling, and patterns that let the owning teams operate securely by default.
You will join during a pivotal moment. We are standing the team up, defining what good looks like across platform security, identity, and network security, and rolling out the first paved roads for image scanning, SBOM generation, CVE response, CI/CD identity, and a unified internal network across our datacenters (GCP, AWS) and offices (Miami, Berlin, and Copenhagen). You'll have direct impact on how 100+ engineers write, review and ship secure systems.
What You Will Do
- Design and build the paved roads for image scanning, SBOM generation, and CVE response, running inside the pipelines teams already use, with findings routed to the owners who can fix them under tracked SLAs
- Lead the design, reviews, and tooling for a unified internal network and VPN across GCP, AWS, and our Miami, Berlin, and Copenhagen offices, while the team that owns the network keeps running it
- Work with the auth service maintainers on identity and access, including MFA rollouts, removal of shared accounts, and cleanup of long-lived tokens, so the patterns stay theirs to own
- Make workload identity the paved road for CI/CD, using OIDC between GitHub Actions and AWS or GCP, packaged so teams can migrate themselves
- Build audit logging as a shared capability that teams plug into rather than reinvent
- Turn GRC controls into technical implementations, with evidence pipelines that produce auditable output without manual follow-up
- Own the contracting cycle for external penetration tests and build the intake, classification, and tracking system that routes findings to named owners, while the owning teams remediate
- Hand each capability off cleanly, with a runbook, a named owner, and an escalation path, and run office hours where product and platform teams can get a security review or a paved-road question answered
- Mentor the rest of the team and raise the security bar across Builders
What You Could Bring
- Platform security: you have run vulnerability scanning, CVE management, and image scanning at scale, and you know the operational reality of getting CVEs fixed, beyond standing up the tooling
- Identity and auth: you have worked hands-on inside an auth codebase, rolled out MFA on live systems, and managed token lifecycles in CI/CD with OIDC and workload identity
- Network security at scale: you have designed and run a unified internal network across multiple cloud providers and offices, with a VPN approach that holds up
- Platform-as-product mindset: you have built internal security tooling that other teams chose to adopt, with guard rails built into the tools developers already use and manual review as a last resort, and you gathered feedback and measured the impact
- Infrastructure as Code: strong experience with Terraform, Crossplane, or similar
How We Work
Our Copenhagen office mirrors our innovative technology – with an indoor ball court, rooftop terrace, and well-equipped gym. We have created a facility that supports connecting disciplines across the business, facilitates creative thinking, and gives the space to engage with colleagues, our global partners, and the entire Veo community.
Values we hold at Veo:
Dare - We take initiative, stay curious, and challenge the status quo in our work.
Own it - We drive impact by identifying opportunities, taking responsibility, and confidently executing.
Level up - We embrace growth, continuously learning and shaping our skills.
Play as a team - We collaborate across a diverse organization, leveraging shared insights for stronger
outcomes.
Customer Centric - We deliver value by having close partnerships and a deep understanding of our customers (internally and externally)
We value diversity and inclusion and welcome applicants from all backgrounds, even if your experience doesn’t completely match every qualification listed. What matters most is your creativity, potential, and ability to make meaningful contributions.
