Security Engineer – Senior, Staff

This is a fully remote position, open to applicants in United States.

📋 Description

• Design and implement security measures across applications, cloud infrastructure, internal systems, and development environments.

• Conduct architecture evaluations, threat modeling, code reviews, and security assessments for new products and features.

• Identify, prioritize, and mitigate vulnerabilities throughout the technology stack.

• Integrate security into the software development lifecycle by establishing secure coding standards, automated testing, and enhancing developer tools.

• Develop and enhance capabilities for detection, monitoring, incident response, and vulnerability management.

• Collaborate with engineering and infrastructure teams to fortify cloud, container, network, identity, and access security.

• Lead or assist in the investigation and resolution of security incidents.

• Create reusable security tools, automation, documentation, and technical guidelines.

• Assess third-party technologies, integrations, and vendors for potential security vulnerabilities.

• Assist with customer security assessments, enterprise diligence, and compliance with technical requirements.

• Contribute to the establishment of security policies and controls aligned with SOC 2, ISO 27001, HIPAA, or PCI DSS frameworks.

• Mentor engineers and foster a culture of shared security responsibility throughout the organization.

• Submit an application to join SignalFire’s Talent Ecosystem.

• Maintain active profile consideration for future Security Engineering positions within SignalFire’s portfolio companies.

⛳️ Requirements

• 5+ years of experience in security engineering, application security, cloud security, infrastructure security, or related fields.

• Solid foundation in software or systems engineering.

• Proficiency in programming languages such as Python, Go, Java, JavaScript, TypeScript, Rust, or Bash.

• Experience in securing cloud-native applications and infrastructure on platforms like AWS, GCP, or Azure.

• Understanding of common application and infrastructure vulnerabilities, attack methods, and mitigation techniques.

• Experience with threat modeling, secure design evaluations, penetration testing, or vulnerability research.

• Knowledge of identity and access management, secrets management, encryption, and network security.

• Proven ability to build security automation and integrate controls into CI/CD pipelines.

• Capability to communicate technical risks and recommendations to engineering teams and business stakeholders.

• Strong judgment in risk prioritization, remediation, and balancing security with operational efficiency.

• Experience working in venture-backed startups, security-sensitive industries, or rapidly scaling tech companies.

• Passion for developing secure, resilient products and infrastructure.

• Ability to identify vulnerabilities and convert security risks into actionable engineering solutions.

• Interest in establishing security programs and technical standards in dynamic startup environments.

• Proven ability to collaborate across engineering, product, infrastructure, and business teams.

• Interest in balancing robust security measures with product development speed and customer requirements.

🏝️ Benefits

• Exclusive access to early-stage opportunities that may not be publicly advertised.

• Your profile will be shared with SignalFire portfolio companies.

• Continuous profile consideration for future Security Engineering roles within the portfolio.

• Potential access to full-time operating, fractional/interim, and advisory roles based on applicant preference.

• Opportunity to receive newsletters, insights, or invitations to community events (with consent).