Senior Staff Security Engineer

Role overview

A senior staff-level security engineering role centered on protecting cloud infrastructure and operationalizing security across an AI-driven personalization platform. The position owns current and target-state security architectures for AWS and GCP environments, leads detection engineering, vulnerability management, and incident response, and shapes secure practices for AI-enabled tooling and emerging product capabilities.

Responsibilities

- Design, implement, and continuously monitor cloud security controls across AWS and GCP environments - Deploy, configure, tune, and maintain SIEM platforms; author detection rules, playbooks, and alerting workflows - Identify, triage, and remediate infrastructure and web vulnerabilities; manage full CVE lifecycle including patching and root-cause analysis - Lead incident triage, coordinate external researcher engagement, and drive vulnerability disclosure programs - Build automation, tooling, and infrastructure-as-code guardrails with policy-as-code enforcement in CI/CD pipelines - Define organization-wide security standards, runbooks, and playbooks; mentor junior engineers

Requirements

- 6+ years of relevant security engineering experience - Strong proficiency in cloud security, network security, URL filtering, common security frameworks, and CVE lifecycle management - Hands-on experience designing secure AWS and GCP architectures, performing threat modeling, and validating secure IaC - Practical scripting and automation skills in Python, Go, or Bash - Demonstrable operational experience with firewalls, WAFs, cloud network controls, and endpoint protections - Strong cross-functional communication with engineering, leadership, external researchers, and customers

Nice to have

- Experience applying threat modeling and adversary-focused testing to drive resilient designs - Familiarity with AI/ML security risks, including prompt injection, model data access, and secure AI adoption

Benefits and work setup

- Remote work supported - Equity grants (RSUs or stock options) based on role, seniority, and location - Company-wide performance bonus eligibility - $1,500 annual professional education budget for books, courses, or certifications - Up to 26 calendar weeks of paid parental leave for primary caregivers - Quarterly company-wide "disconnect" days off - Employee assistance program and wellness app subscription - Sports, yoga, and meditation opportunities - Five paid volunteer days per year