Staff Security Engineer

Role overview A senior security engineering role on a small, high-impact IT and Information Security team responsible for protecting decision-ready AI used by critical organizations. The position owns cloud security architecture, detection and response tooling, and the integration of security into both IT and DevOps workflows. It is ideal for someone who can drive a Zero Trust program forward while staying close to hands-on engineering work.

Responsibilities - Continuously analyze and improve the organization's security posture across cloud-based infrastructure, platforms, and applications. - Conduct security assessments and audits of cloud environments, identifying and remediating vulnerabilities and misconfigurations. - Manage and tune cloud-native security tools such as EDR, IAM, and WAF, and own the DAST and SAST solutions that feed the SDLC. - Respond to security alerts, perform root cause analysis, and lead incident response from initial detection through final resolution. - Broaden the Zero Trust framework in partnership with the IT team and integrate security practices into DevSecOps and the broader software development lifecycle. - Automate security workflows to drive continuous compliance, and track emerging threats to recommend enhancements.

Requirements - 10+ years of experience in security and/or cloud operations with strong written and oral communication skills. - Hands-on experience with AWS and cloud-native security controls such as IAM and WAF. - Direct experience operating intrusion prevention systems and managing system logging plus SIEM technologies. - Practical knowledge of vulnerability management tools, techniques, and remediation processes, plus familiarity with incident response procedures. - Proven ability to embed security practices inside IT and DevOps environments, including automation of security workflows. - Experience integrating Okta as an identity provider into security processes and operations.

Nice to have - Working knowledge of Python and Golang for security automation. - Cloud security certifications such as AWS Certified Security - Specialty, Azure Security Engineer, or CCSP.

Benefits and work setup - Annual cash compensation in the US $175,000-$235,000 range, with final figures based on experience and skills. - Full medical, dental, and vision coverage, fertility benefits, mental health coverage, fitness membership, primary care access, 401(k), and remote work plus monthly internet stipends. - Flexible vacation policy, Wellness Days, and 100% paid parental leave; offers may be conditioned on the ability to meet applicable U.S. government contract requirements.