Staff Security Engineer

Role overview

Set technical direction for enterprise security platforms that protect infrastructure, cloud environments, and business operations. This staff-level engineering role combines architecture, hands-on platform improvement, automation, and cross-functional leadership to strengthen security capabilities at scale.

Responsibilities

- Design and improve security platforms, standards, and baselines across endpoint protection, secrets, identity, and vulnerability management. - Lead complex security engineering initiatives, from identifying capability gaps and selecting solutions to implementation and operational handoff. - Work with cloud, infrastructure, network, and reliability teams to build security controls into platforms and operational processes. - Develop automation and integrations that expand coverage, improve consistency, and reduce manual security work. - Coordinate vulnerability remediation, investigate complex incidents, analyze root causes, and implement lasting engineering improvements. - Define platform and program measures, advise technical teams, mentor engineers, and support audit and compliance needs.

Requirements

- 6–10 years of experience in security engineering or a related infrastructure, cloud, systems, or information security discipline, including leadership of complex initiatives. - A bachelor’s degree in a relevant field or equivalent education and professional experience. - Strong knowledge of enterprise security architecture, endpoint security, vulnerability management, secrets management, and identity security. - Experience with cloud security across AWS and modern infrastructure platforms, plus security automation, scripting, and systems integration. - Broad understanding of enterprise infrastructure, networking, operating systems, and cloud technologies. - Strong problem-solving, communication, and cross-functional leadership skills; able to explain technical issues to business and technical audiences.

Nice to have

- Security certifications such as CISSP, CCSP, or GSEC. - Experience in regulated financial services, infrastructure as code, cloud-native systems, or security platform modernization. - Familiarity with network security tools or emerging AI-enabled security tools.

Benefits and work setup

- Remote-first work, with occasional travel to the headquarters, approximately one or two trips per year. - The stated salary range is $128,800–$161,000. Benefits include unlimited paid time off and a retirement plan with employer match. - Applicants must be authorized to work full-time in the United States; employment sponsorship is unavailable.