Senior Security Engineer
Senior Security Engineer responsible for application, cloud, and platform security, with a focus on automating security workflows, threat modeling, secure development, and remediation. Requires hands-on SaaS security, cloud infrastructure, code review, and agent or automation experience.
About the job
Responsibilities
- Define and drive security standards and secure-by-default solutions for application and cloud security.
- Build agents, skills, tooling, and automation that integrate security into the development lifecycle and reduce manual triage, enrichment, review, and detection work.
- Incorporate risk-based security review into design specifications and architecture decisions.
- Build security observability and detection capabilities that scale across engineering.
- Lead threat modeling and risk assessments for high-risk features and platform changes.
- Assess and mitigate risks from agentic development practices and AI-powered production features.
- Partner with engineering teams to prioritize and remediate critical threats, define API security standards, and conduct security code reviews.
- Evaluate and adopt open-source tools for service security testing.
- Identify systemic security risks and lead cross-team remediation efforts.
- Collaborate across security, compliance, and engineering on complex security problems.
- Contribute to SOC 2 and ISO 27001/42001 initiatives.
- Mentor teammates and help raise security standards across engineering.
Requirements
- Proven experience securing enterprise SaaS applications, including authentication, authorization, and API input validation.
- Experience securing software and infrastructure deployment and change-management mechanisms.
- Background in software, platform, systems, network, cloud security, or application security engineering.
- Hands-on code review experience, ideally with Go, Python, or Rust.
- Experience with AWS or another major cloud provider and cloud infrastructure.
- Experience building agents or automation that replaces manual security work.
- Ability to work independently and collaboratively in a fast-paced environment.
- Current knowledge of modern security practices, tools, emerging threats, and AI-related security risks.
- Quarterly in-person participation at the San Francisco or Portland, Oregon office.
Nice to Have
- Kubernetes, service mesh, or PKI/network technology experience.
- Experience with Consul, Envoy, Cilium, Vault, or Istio.
- Experience building or extending internal security tooling, automation, or agents.
- Experience at a high-growth SaaS or identity and access management company.
Compensation and Benefits
- $100,000–$200,000 annual salary.
- Meaningful equity and comprehensive health benefits.
Skills
AWS, Go, Python, Rust, Kubernetes, Service Mesh, Pki, Consul, Envoy, Cilium, Vault, Istio, Threat Modeling, Api Security, SOC 2
Similar jobs
Security Engineering jobs
Idme
McLean, VA
Leads cloud-native security operations, incident response, threat hunting, and forensic investigations while mentoring SOC analysts and improving detection processes. Requires 8+ years in information security, including hands-on cloud incident response and experience with Kubernetes, CI/CD, and advanced security tools.
BlackCloak
United States
Leads end-to-end response to sophisticated compromises, account takeovers, device threats, and related financial fraud for high-profile clients. Requires 5–8+ years of incident response or DFIR experience, broad device forensics expertise, strong client communication, and fraud-remediation experience.
Coalition Security
United StatesInvestigates cyber incidents and insurance claims, assesses security controls, and advises customers and security leaders on prioritized risk improvements. The role requires 2–4 years of security experience, strong network threat knowledge, and familiarity with major security and compliance frameworks.
Supernova Technology
Chicago, IL
The Senior Information Security Engineer will lead threat hunting, detection engineering, incident response, vulnerability management, and security-platform ownership across cloud and enterprise environments. The role requires 5+ years of security experience, strong attacker-TTP knowledge, and hands-on expertise with enterprise security technologies and automation.
Chainguard
United States
Build and operate Chainguard’s public-sector governance and trust capabilities, translating federal security requirements into automated controls, evidence systems, and risk-based decisions. The role requires hands-on federal, defense, or intelligence experience and strong technical fluency in cloud-native environments.