Security Engineer

Responsibilities

• Build security primitives, tooling, and automation that scale with the product and engineering organization.
• Define and implement modern security workflows, including AI-assisted vulnerability discovery, automated code review, threat detection, and remediation.
• Collaborate with Infrastructure and Product Engineering to make secure defaults the easiest path.
• Own projects end to end, including design, implementation, rollout, and measurement.

Cloud Security

• Secure cloud environments through IAM, network policies, container security, secrets management, and misconfiguration prevention.
• Define and enforce least-privilege access patterns across services and users.
• Improve cloud visibility and control using infrastructure as code and cloud security tooling.
• Develop preventative controls and safe deployment patterns that reduce the probability and blast radius of incidents.

Application Security

• Lead secure design and secure coding practices and prevent common vulnerability classes.
• Perform architecture reviews and code-level security reviews, and work hands-on with engineers to ship fixes.
• Own vulnerability discovery and validation, including static and dynamic analysis, dependency checks, penetration tests, and bug bounties.
• Integrate automated detection systems to find vulnerabilities at scale.
• Build and deploy security agents and automated workflows that scan codebases, propose fixes, and in some cases autonomously deploy security patches.
• Build reusable frameworks and components for authentication, authorization, and secure-by-default patterns.
• Define practical policies and controls for code-generation tools and coding-agent changes.

Requirements

• Strong software engineering fundamentals and a track record of shipping production systems.
• Deep expertise in either cloud security or application security, with the ability to work across both domains.
• Ability to translate risk into concrete engineering work and ship solutions.
• Comfort building from first principles and defining effective security practices.
• Interest in using modern automation and AI to scale security operations while maintaining engineering rigor.

Tools and Technologies

• Terraform
• AWS Config
• AWS Security Hub
• Cloud security tooling
• Static and dynamic analysis
• Dependency checking
• Penetration testing
• Bug bounty programs
• AI security automation