Senior Full-Stack Engineer (Next.js + Supabase) to Own a Multi-Tenant SaaS Build

We’re an established cybersecurity company building out a multi-tenant SaaS platform (GRC and security tooling). The core product is already live and we’re scaling it. We’re looking for a senior full-stack engineer to take real ownership of the build, not just work tickets. You’ll work directly with the founder, make architecture decisions, and see them through. This is an ongoing role, with a clear path to expanding scope as the product grows. What you’ll own • Feature development across the stack, frontend through database • Multi-tenant architecture: tenant isolation, data segregation, per-tenant access boundaries • Auth, roles, and permissions • Supabase schema design, RLS policies, Edge Functions, Storage • Stripe billing and subscription logic • Third-party integrations (cloud providers, identity, PSA tools) • Clean, secure, maintainable code you’d be comfortable having audited Our stack • Next.js (React, TypeScript) • Supabase (Postgres, Auth, Storage, Edge Functions, RLS) • Stripe • Vercel Must have • A strong track record shipping production SaaS with Next.js and TypeScript • Real multi-tenant SaaS experience. You understand tenant isolation and why it matters, and you’ve implemented row-level security or an equivalent before • Hands-on Supabase, or deep Postgres with the willingness to ramp fast • A security-first mindset. This is a cybersecurity product, so secure defaults, careful handling of sensitive data, and awareness of common web vulnerabilities are non-negotiable • The ability to work independently and own outcomes without hand-holding • Clear written communication and reliable availability during overlapping hours Nice to have • Experience with GRC, compliance, or security tooling • PSA/RMM or MSP-ecosystem integration experience (ConnectWise, HaloPSA, Datto) • Prior work on products that went through SOC 2 or a similar audit