Security Engineer

Role overview A remote Security Engineer position based in the United States. The role centers on safeguarding systems, applications, and data through proactive defense, secure design, and rapid response to emerging threats. It is a hands-on engineering role rather than a pure analyst or compliance position.

Responsibilities - Design and implement security controls across infrastructure, services, and application code - Conduct threat modeling, architecture reviews, and code review to surface weaknesses early - Investigate and respond to security incidents, performing root cause analysis and follow-up remediation - Build detection, prevention, and automation tooling that fits naturally into engineering workflows - Partner with product and platform teams to embed secure-by-default patterns and provide consultative guidance

Requirements - Professional experience in security engineering or a closely related discipline - Solid understanding of common attack vectors, web application security, and cloud environments - Ability to read and reason about code in at least one mainstream programming language - Familiarity with incident response processes, vulnerability management, and basic forensics - Clear written communication for documenting findings and influencing engineering peers

Nice to have - Background in cryptography, identity, or distributed systems security - Contributions to open-source security tooling or public research