Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Report directly to the Information Security Manager while collaborating with Security, DevOps, Engineering, IT, and Compliance teams.

• Engineer and maintain security controls in AWS, focusing on identity, logging, monitoring, network security, encryption, and configuration assurance.

• Develop, review, and enhance Infrastructure as Code for security controls and cloud infrastructure.

• Operate and refine the SIEM by onboarding logs, creating detection content, tuning alerts, conducting investigations, building dashboards, and implementing threat-aligned use cases.

• Administer and bolster identity and access management across various identity providers, cloud environments, and SaaS platforms.

• Maintain and improve intrusion detection and prevention systems across cloud, endpoint, and network environments.

• Manage aspects of the vulnerability management lifecycle, including scanning, validation, prioritization, remediation tracking, exception support, and reporting.

• Collaborate with Engineering and DevOps to secure CI/CD pipelines, dependencies, secrets, container images, Kubernetes or ECS workloads, and runtime environments.

• Create security automation, integrations, and tools utilizing scripting and APIs.

• Assist in incident response through technical investigations, evidence collection, remediation coordination, and enhancements to post-incident controls.

• Conduct technical security reviews of infrastructure, architecture, applications, and configuration changes.

• Document findings, recommendations, standards, and operational runbooks.

• Monitor cloud threats and defensive capabilities, implementing improvements that mitigate risk without introducing unnecessary friction.

⛳️ Requirements

• A minimum of 3 years of hands-on experience in security engineering, cloud engineering, systems engineering, DevSecOps, or a closely related technical role.

• Practical experience in securing AWS environments, along with a solid understanding of core AWS security services and operations in multi-account or multi-environment settings.

• Professional experience with Infrastructure as Code for building or managing cloud infrastructure and security controls.

• Hands-on experience with a SIEM or cloud security analytics platform, including log analysis, detection engineering or alert tuning, investigation workflows, and reporting.

• Practical experience with identity providers and identity security controls, including SSO, MFA, SCIM or lifecycle management, access governance, and privileged access.

• Experience in operating or supporting IDS, IPS, EDR, NDR, WAF, or similar detection and prevention technologies.

• Strong understanding of network security fundamentals.

• Familiarity with vulnerability management tools and processes.

• Working knowledge of containerization and security for cloud-native workloads, including Docker, container registries, image scanning, Kubernetes, ECS, or EKS.

• Capability to automate tasks and integrate tools using Python, Bash, PowerShell, JavaScript or TypeScript, APIs, and version-controlled workflows.

• Excellent analytical, troubleshooting, and communication abilities.

• Ability to work independently while collaborating effectively across Security, Engineering, DevOps, IT, and Compliance teams.

• Bonus qualifications include experience with AWS CDK, penetration testing, Kubernetes/EKS security, SOAR, PCI DSS, SOC 2, SAST, DAST, SCA, secrets scanning, threat modeling, secure code review, and relevant security or cloud certifications.

🏝️ Benefits

• Comprehensive health insurance.

• 401(k) plan with company matching.

• Generous paid time off policy.

• Up to eight weeks of paid parental leave for eligible caregivers.

• Remote-first work environment offering flexibility and autonomy.

• Annual allowance for professional development.

• Option for home-office work.

• Transparent, trust-based work culture.

• Support for career advancement and ongoing learning.

• Reasonable accommodations available for the application, interview, and employment process.