Remote job
Staff Security Engineer
Job details
About this role
Role overview
Lead security engineering across applications, cloud infrastructure, and software delivery. You’ll work with engineering, infrastructure, and product teams to identify systemic risks and build practical controls that strengthen security while supporting reliable development.
Responsibilities - Lead architecture and design reviews for services, infrastructure, and third-party integrations. - Coordinate penetration testing, threat modeling, and reviews of critical services and new features. - Build security checks and automation into CI/CD workflows, including protections for code and infrastructure. - Partner with infrastructure teams to improve AWS identity, network, and workload security. - Develop security telemetry and detection capabilities, including data pipelines and SIEM integrations. - Guide developers on secure design and coding, and address classes of weaknesses rather than isolated findings.
Requirements - Strong knowledge of cloud security, common vulnerabilities, and attacker techniques such as OWASP Top 10 and MITRE ATT&CK. - Production software or automation experience in Python, TypeScript, or a similar language. - Hands-on experience securing AWS environments, including IAM, networking, and containerized workloads. - Experience with DevSecOps tooling such as SAST, DAST, infrastructure scanning, and container security. - Background in penetration testing, threat modeling, or architecture security reviews. - Clear communication and a record of working across engineering, infrastructure, and product teams.
Nice to have
Experience with SaaS and distributed systems, SIEM or security telemetry, threat detection, Kubernetes, Terraform or Ansible, and security frameworks such as CIS, NIST, SOC 2, PCI, or HIPAA.
Benefits and work setup
Remote work, medical, dental, and vision coverage, life and disability insurance, family leave, paid holidays and flexible PTO, a retirement contribution, health spending accounts, and home office support. The package also includes equity, a phone stipend, team events, and periodic in-person gatherings.