# Security Engineer

**Company:** [Clay](https://hotfix.jobs/companies/clay)
**Location:** New York, NY, San Francisco, CA
**Role:** Security Engineering
**Salary:** $225k – $300k/yr
**Experience:** 5+ years
**Skills:** Cloud Security, Application Security, AWS, Terraform, aws config, aws security hub, IAM, Kubernetes, container security, secrets management, static analysis, dynamic analysis, Penetration Testing, Vulnerability Management, ai security automation
**Posted:** 2026-04-16

> Build production security tooling, detection systems, remediation pipelines, and secure-by-default frameworks across cloud and application security. The role requires strong software engineering fundamentals, deep expertise in one security domain, and the ability to deliver hands-on solutions.

## Job Description

## Responsibilities
- Build security primitives, tooling, and automation that scale with the product and engineering organization.
- Define and implement modern security workflows, including AI-assisted vulnerability discovery, automated code review, threat detection, and remediation.
- Collaborate with Infrastructure and Product Engineering to make secure defaults the easiest path.
- Own projects end to end, including design, implementation, rollout, and measurement.

## Cloud Security
- Secure cloud environments through IAM, network policies, container security, secrets management, and misconfiguration prevention.
- Define and enforce least-privilege access patterns across services and users.
- Improve cloud visibility and control using infrastructure as code and cloud security tooling.
- Develop preventative controls and safe deployment patterns that reduce the probability and blast radius of incidents.

## Application Security
- Lead secure design and secure coding practices and prevent common vulnerability classes.
- Perform architecture reviews and code-level security reviews, and work hands-on with engineers to ship fixes.
- Own vulnerability discovery and validation, including static and dynamic analysis, dependency checks, penetration tests, and bug bounties.
- Integrate automated detection systems to find vulnerabilities at scale.
- Build and deploy security agents and automated workflows that scan codebases, propose fixes, and in some cases autonomously deploy security patches.
- Build reusable frameworks and components for authentication, authorization, and secure-by-default patterns.
- Define practical policies and controls for code-generation tools and coding-agent changes.

## Requirements
- Strong software engineering fundamentals and a track record of shipping production systems.
- Deep expertise in either cloud security or application security, with the ability to work across both domains.
- Ability to translate risk into concrete engineering work and ship solutions.
- Comfort building from first principles and defining effective security practices.
- Interest in using modern automation and AI to scale security operations while maintaining engineering rigor.

## Tools and Technologies
- Terraform
- AWS Config
- AWS Security Hub
- Cloud security tooling
- Static and dynamic analysis
- Dependency checking
- Penetration testing
- Bug bounty programs
- AI security automation

## Similar roles

- [IT Manager](https://hotfix.jobs/jobs/9c31d15a-9357-4f04-b71e-d9cb83c69040) - Pave - San Francisco, CA - From $220k/yr
- [Platform Engineer, Product Security](https://hotfix.jobs/jobs/785c323f-1e3d-46f9-80d0-22b6e6d8b5fb) - Wispr Flow - San Francisco, CA - $220k – $350k/yr
- [Security Engineer, Corporate Security](https://hotfix.jobs/jobs/67a3be58-d872-49bb-8e16-ed79c79c42ca) - Notion - San Francisco, CA - $220k – $260k/yr
- [Software Engineer, Scaled Abuse](https://hotfix.jobs/jobs/732bab54-c578-4c2f-928e-cb75247fc80d) - OpenAI - San Francisco, CA - $230k – $385k/yr
- [Technical Cyber Threat Investigator](https://hotfix.jobs/jobs/0c91d6da-b527-4975-b07f-c6e3c451c4ba) - Anthropic - San Francisco, CA - $230k – $290k/yr

**Apply:** https://hotfix.jobs/jobs/c2ecc642-bb3f-41ea-9b68-12c7769b99e7
**Canonical:** https://hotfix.jobs/jobs/c2ecc642-bb3f-41ea-9b68-12c7769b99e7