Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop and manage controls that safeguard Allium’s infrastructure, applications, employee systems, and AI usage.

• Collaborate with Engineering and the security-program lead to analyze threats, apply effective solutions, and automate security tasks.

• Enforce least privilege access, phishing-resistant authentication, short-lived credentials, privileged-access controls, and manage provisioning and deprovisioning.

• Enhance cloud configurations, credential storage, network security, and secrets management.

• Protect AI agents and developer tools through permissions, execution isolation, network limitations, audit trails, and defenses against prompt injection and tool misuse.

• Integrate identity, cloud, workload, and CI/CD telemetry to identify threats and investigate incidents.

• Minimize alert noise, validate response protocols, revoke sessions, rotate compromised credentials, and eliminate unauthorized access.

• Evaluate software dependencies, CI/CD processes, third-party integrations, and developer environments to mitigate supply-chain risks.

• Monitor publicly accessible services, assess vulnerabilities and active threats, and coordinate remediation efforts.

• Automate access reviews, configuration assessments, evidence gathering, and remediation tracking utilizing code and APIs.

• Implement and sustain endpoint protections and device security standards.

• Assist with identity and SaaS controls, audits, customer evaluations, and security documentation.

⛳️ Requirements

• Generally requires 4+ years of pertinent experience in security, infrastructure, or software engineering, with a focus on implementing security controls.

• Proficient hands-on experience with a major cloud platform.

• Strong foundational knowledge in identity management, networking, operating systems, and access control.

• Expertise in at least two areas such as cloud security, detection and response, application security, vulnerability management, or corporate security.

• Experience in troubleshooting technical issues using logs and system behavior, testing hypotheses, and resolving problems effectively.

• Excellent communication skills, sound judgment, and the ability to build collaborative relationships with engineers and business teams.

• Must respond to the application question: “What is an Allium? What is your favorite Allium?”

• U.S. work eligibility and visa sponsorship status are required in the application form.

🏝️ Benefits

• Medical, Dental, Vision, Life, and AD&D insurance; U.S. employees receive 100% coverage for Gold plans and 80% for dependents.

• Valuable early-stage equity; each full-time employee is granted stock options.

• Flexible, trust-based paid time off policy.

• Vacation policies that meet or exceed local statutory requirements in every country of hire.

• Company-sponsored 401(k) plan available in the U.S.

• Remote work options available.