Lead Security Engineer
Leads security risk identification, prioritization, and remediation across an infrastructure organization while building a security program and advising technical leaders. Requires a bachelor’s degree, 8+ years of software or infrastructure engineering experience, and substantial security experience.
About the job
Responsibilities
- Identify, prioritize, and help resolve the organization’s most significant security concerns.
- Collaborate across the organization to understand the technical landscape and organize security risks.
- Directly contribute to projects that secure systems.
- Build a security program largely from the ground up.
- Advise non-security technical leaders by translating technical risk into clear, actionable recommendations.
Requirements
- Bachelor’s degree.
- 8–10 years of overall software or infrastructure engineering experience.
- 5+ years focused on security engineering, application security, or security architecture.
- Experience owning a security program is preferred.
- Hands-on experience conducting security and compliance audits and implementing or assessing controls.
- Experience with NIST 800-171.
- Ability to take initiative on ambiguous, high-stakes problems.
Compensation and Benefits
- Base salary: $176,400–$264,600 annually.
- Annual bonus opportunities and participation in a long-term incentive plan.
- Medical, dental, vision, and employee assistance program coverage.
- Health savings, healthcare reimbursement, and flexible spending account plans.
- 401(k) plan.
- $125 per month for commuting or internet expenses.
- $200 per month for fitness and wellbeing expenses.
- Up to 10 sick days, 7 personal days, 20 vacation days, and 12 paid holidays per year.
Skills
Security Engineering, Application Security, Security Architecture, Security Audits, Compliance Audits, Security Controls, Nist 800-171, Risk Assessment, Security Programs
Similar jobs
Security Engineering jobs
Snowflake
Menlo Park, CALeads product security incident response for Snowflake’s AI products and infrastructure, developing detection, containment, and remediation capabilities for LLM and agentic threats. Requires 5+ years in security, incident command experience, cloud-native expertise, and strong knowledge of AI attack surfaces.
Snowflake
United States
Leads product security incident response for Snowflake’s AI and agentic products, developing detection, containment, remediation, and automation capabilities. Requires 5+ years in security, incident command experience, cloud expertise, and knowledge of AI/ML attack surfaces.
Starburst
Boston, MA
Own and scale Starburst’s application and product security program through secure-by-default engineering, automated vulnerability management, threat modeling, and autonomous offensive testing. The role requires 5–7 years of security-focused experience, strong software supply chain expertise, and the ability to engage enterprise customers and lead engineers.
Jasper
United States
The Senior Security Engineer will secure Jasper’s AI systems, cloud infrastructure, software supply chain, and compliance workflows while building automation and security standards for a growing program. The role requires 8+ years of security engineering experience and hands-on expertise across AI, cloud, or GRC security.
Jasper
United States
Own and scale Jasper’s governance, risk, and compliance program for AI-native SaaS products, leading audits, risk and vendor programs, policy management, and AI governance. The role requires 8+ years of GRC experience, expertise in major security frameworks, cloud and AI fluency, and strong cross-functional communication.