Security Engineer

Job Description:

• Own scanning across code, dependencies, images, cloud configuration, and external attack surface
• Automate vulnerability triage, routing to owners, and remediation where safe
• Keep unresolved vulnerabilities within SLAs
• Own and expand security gates in build and deployment pipelines
• Block vulnerable dependencies and misconfigurations before deployment
• Define secure baselines for the cloud estate and detect and remediate drift
• Drive least privilege and zero trust across systems, credentials, and workloads
• Run application security design reviews, code reviews, and threat modeling
• Partner with DevOps on reusable, secure-by-default CI/CD, logging, and authentication paths
• Serve as technical lead during investigations and build tooling to accelerate future incident response
• Automate repetitive security processes
• Collaborate directly with engineering, DevOps, and the head of security
• Own meaningful security surface from the first week and expand scope over time

Requirements:

• 4+ years in security engineering, or infrastructure engineering with real security ownership, at a cloud-native company
• Ability to write code in Python, Go, or similar
• Deep knowledge of cloud IAM and Kubernetes security
• Experience designing for least privilege and short-lived credentials by default
• Fluency in CI/CD and experience hardening pipelines
• Ability to work openly with engineers through design reviews, pull requests, and documentation
• Ability to prioritize by real-world risk and explain decisions to engineers and leadership
• Bonus: Experience securing systems that process email or other high-sensitivity customer data
• Bonus: Experience building and automating a vulnerability management program end to end
• Bonus: LLM application security knowledge, including prompt injection, model pipelines, and AI agent guardrails
• Bonus: Supply chain security experience, including artifact signing, provenance, and SBOMs
• Bonus: Detection engineering or close partnership with a SOC
• Bonus: Experience at a security vendor
• United States location

Benefits:

• Flat, flexible, and fast culture
• Ownership of decisions
• Clear KPIs for success with autonomy in how to achieve them
• Remote work arrangement