Security Engineer

Role overview Help strengthen security across cloud infrastructure, applications, and software delivery in a cloud-native environment. The work combines security engineering, vulnerability management, supply chain safeguards, automation, and incident response, in partnership with platform and software teams.

Responsibilities - Design and maintain security controls for cloud systems, applications, and sensitive data. - Improve cloud posture and vulnerability management by tuning scanning coverage, coordinating triage, and driving findings through remediation. - Add practical guardrails for packages, dependencies, developer extensions, and CI/CD pipelines, including controls for AI-generated code. - Build self-service automation and integrations for developer and security tools. - Assess application security through code review and testing, and work with engineering teams to prioritize remediation. - Join a weekly on-call rotation for threat escalations; investigate incidents, support recovery, and determine root causes. - Maintain security procedures and policies aligned with relevant standards and regulatory needs.

Requirements - A degree in computer science or a related field, or equivalent experience. - At least four years in application security, cloud security, or a related cybersecurity role. - Solid understanding of cloud security architecture and services; experience with AWS or Azure is preferred. - Hands-on experience with cloud security posture or CNAPP tools, including taking findings to closure with engineering teams. - Ability to build security automation and integrations using at least one programming or scripting language. - Working knowledge of secure coding, incident response and recovery, and frameworks or regulations such as NIST CSF, HIPAA, or MITRE ATT&CK. - Strong analytical judgment and problem-solving skills.

Nice to have - Security certifications such as CISSP, CCSP, OSCP, or GIAC. - Experience with AWS security controls, Terraform, GitHub, and securing CI/CD workflows. - Familiarity with AI-assisted development security, internal developer platforms, or working with a managed detection and response provider.

Benefits and work setup - The listed starting salary is $100,000–$130,000, with the final amount depending on location, qualifications, and experience. - Benefits include health, dental, and vision coverage; paid time off and holidays; retirement plan matching; disability and life insurance; and wellness and family support programs.