Security Engineer
Security Engineer designs and implements security measures for cloud infrastructure and applications, conducts code reviews, automated testing, and incident response. Requires 5+ years experience with TypeScript, Python, Kubernetes, AWS, and IaC security.
About the job
Responsibilities
- Design, implement, and manage security measures for cloud infrastructure, applications, and data, focusing on preventative controls and rapid response.
- Collaborate with engineering teams to integrate security into SDLC, including secure coding, automated testing, and architecture design.
- Conduct security code reviews to identify and remediate vulnerabilities.
- Develop and implement automated security testing procedures.
- Respond to security incidents and participate in incident response.
- Document security processes and best practices.
- Lead security awareness and training programs.
Qualifications
- 5+ years experience as Security Engineer focused on product security, securing cloud environments (AWS, Azure, GCP), IaC security.
- Strong coding skills in TypeScript and Python.
- Expertise in application security, network security, security operations, incident response.
- Experience with container security (Docker, Kubernetes).
- Familiarity with AWS services (VPC, EC2, Lambda, RDS, S3).
- Knowledge of CI/CD tools (GitHub Actions, Jenkins).
- Knowledge of compliance frameworks (ISO 27001, SOC 2, GDPR).
- Proficiency with security tools: firewalls, IDS/IPS, vulnerability scanners, WAF, SIEM, encryption.
Skills
TypeScript, Python, Kubernetes, AWS, Terraform, Docker, CI/CD, GitHub Actions, Jenkins, SIEM
Similar jobs
Security Engineering jobsThe Security Engineer will track advanced adversaries targeting frontier AI infrastructure, build intelligence pipelines, conduct threat hunts, and create production detections. The role requires hands-on malware and infrastructure analysis, production programming, and close collaboration with detection and incident response teams.
Security Scientist analyzing attacker and user behavior, building data-driven detections, and leading security investigations and design reviews. Requires strong security and anti-abuse knowledge, SQL fluency, scripting proficiency, and experience with distributed data systems and statistical methods.
Own and build the company’s security program as its first full-time security hire, covering product, cloud, infrastructure, incident response, compliance, and customer trust. The role requires hands-on security engineering and incident leadership, with experience operating SOC 2 or comparable frameworks.
Conduct proactive threat hunting and adversary simulation to uncover financial fraud tactics, enrich threat intelligence, and improve platform controls. The role requires at least five years of relevant cybersecurity, abuse, or trust experience plus strong Python, SQL, investigative, and data-analysis skills.
Conduct offensive security operations, red-team engagements, penetration testing, and adversarial simulations across cloud, endpoint, and bare-metal environments. The role requires at least five years of experience, strong engineering skills, and expertise across multiple security domains.