Senior Security Engineer

Role overview Establish and lead security engineering for a growing software and logistics operation. This builder-focused role covers applications, cloud infrastructure, and autonomous coding agents, with responsibility for practical safeguards that help teams ship securely. As the first dedicated security engineer, you will shape the security program and advise engineering leaders and customer-facing teams on risk.

Responsibilities - Conduct threat modeling and secure design reviews, and improve sensitive application code and cloud systems. - Build developer-friendly controls for identity, access, secrets, policy enforcement, and CI workflows. - Define safeguards for AI agents, including access boundaries, credential handling, prompt-injection defenses, and auditability. - Improve security scanning and drive prioritized findings to resolution against clear service targets. - Build detection and response practices, lead incident handling, and ensure post-incident actions are completed. - Manage penetration testing and vulnerability remediation, and contribute to compliance and customer security reviews. - Mentor engineers on authorization, identity, and tenant data isolation.

Requirements - Broad hands-on experience with application and cloud security, including threat modeling and secure design. - Ability to build security tools and guardrails that fit developer workflows. - Experience with security detection, incident response, vulnerability management, and remediation. - Clear judgment and communication when explaining risk to engineering, leadership, and customers. - Ability to guide engineers toward secure implementation patterns.

Nice to have - Familiarity with TypeScript/Node, GraphQL, React or React Native, Go, AWS, EKS, and infrastructure managed with Pulumi. - Experience with SAST, secrets, container, and infrastructure-as-code scanning; SOC 2; enterprise security reviews; or securing AI agents.

Benefits and work setup - Salary, equity, and health, dental, vision, and 401(k) benefits are offered. - The role has direct access to leadership and authority to shape security practices.