Senior Software Engineer - Security
Designs, reviews, and builds security systems for multi-tenant cloud and corporate environments, including architecture guidance, internal tooling like WAF and vuln management, and compliance controls. Requires 5+ years in cloud security, AWS expertise, and strong Python/Go coding skills.
About the job
Responsibilities
- Review RFCs and partner with engineering teams on architectural decisions that have security implications
- Design and build internal security systems end to end, including roadmap areas such as web application firewalls and vulnerability risk management tooling
- Harden and improve security-related production software components as opportunities for better resilience and protection are identified
- Partner with Compliance to translate FedRAMP, SOC 2, Texas RAMP, ISO 27001, and CJIS requirements into practical technical controls
- Improve how we monitor, prioritize, patch, and respond to vulnerabilities across our cloud footprint
- Contribute to authentication and identity systems across cloud and corporate environments, including SSO and SCIM implementations
- Participate in the security team’s on-call rotation
Requirements
- 5+ years of experience in cloud security, platform security, infrastructure security, or a related security-focused engineering role
- Strong experience working in AWS, ideally in multi-tenant cloud environments
- Strong coding ability and comfort building and maintaining tooling in languages such as Python or Go
- Experience reviewing system designs and RFCs and providing clear, actionable security guidance
- Working knowledge of SIEM, vulnerability management, and related security tooling
- Comfort operating across both technical design and hands-on implementation in a role that spans both strategy and execution
Nice to Have
- Experience working in FedRAMP, SOC 2, ISO 27001, Texas RAMP, or CJIS-aligned environments
- Experience building or deeply integrating authentication and identity systems, including SSO, SCIM, and front-door authentication
- Experience with Kubernetes debugging, operations, or automation
- Background supporting government, defense, or other highly regulated customers
Compensation
- Annual base salary range: $190,000 - $250,000
- Equity in the form of stock options
- Comprehensive benefits: health insurance, paid vacation, sick leave, holiday pay, 401K
Skills
AWS, Python, Go, SIEM, Vulnerability Management, Kubernetes, SSO, SCIM, FedRAMP, SOC 2
Similar jobs
Security Engineering jobs
Instacart
United StatesDevelops and operates detection engineering systems across endpoint, cloud, container, and SaaS environments. The role requires at least six years in detection, incident response, or offensive security, strong attacker TTP knowledge, macOS expertise, and detection-as-code experience.
Harvey
San Francisco, CA
Build and operate foundational security services covering identity, authorization, secrets, and privileged access for an AI-powered enterprise platform. The role requires 5+ years of production software engineering experience and hands-on security infrastructure expertise.
Front
San Francisco, CA
This role defines, builds, and secures the internal platform supporting Front’s engineering, GTM, data, and AI tooling. It owns AWS and Snowflake infrastructure, paved-road delivery, observability, access controls, vulnerability management, incident response, compliance support, and AI-client security.
Square
United States
Build data pipelines, integrations, policy-as-code, and agentic AI workflows that automate security governance and continuous compliance. The role requires 7+ years of production software engineering experience plus expertise in LLMs, APIs, distributed data, and cloud infrastructure.
Discord
United States
Senior platform security engineer responsible for building identity and access management systems, Zero Trust architecture, cloud security baselines, and secure developer platforms. Requires 5+ years operating production systems and strong software development and security experience.