Senior Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Facilitate threat modeling and security design discussions with platform and product teams.

• Convert risks into actionable engineering tasks and utilize AI to stress-test designs against potential attack scenarios.

• Assess security architecture for new product features, focusing on data exposure, access control, and risk of abuse cases.

• Develop scalable preventative measures in AWS using Infrastructure-as-Code and AI coding agents.

• Analyze and enhance commercial, cloud-native, and AI-assisted security tools.

• Guide engineers on the effective application of AI in security engineering.

• Create and implement automation for signal correlation, alert enrichment, and auto-remediation.

• Design, construct, and validate integrations between AWS and security tools such as SIEM, SOAR, and IAM platforms.

• Actively participate during security incidents, leveraging AI to expedite log and telemetry analysis.

• Develop and sustain reusable AI-assisted security playbooks for IaC review, detection authoring, and alert triage.

• Collaborate with platform engineering, product engineering, infrastructure, DevOps, and IT teams as a technical liaison.

⛳️ Requirements

• Demonstrated success in security engineering or infrastructure security roles, preferably in cloud-native settings.

• Extensive understanding of AWS architecture and identity/access patterns, encompassing IAM, STS, cross-account roles and resource policies, VPC and network segmentation, and KMS.

• Practical knowledge of Azure and GCP.

• Strong foundational skills in scripting and development with Python and/or Go.

• Proficient in Git, Linux, and infrastructure automation methodologies.

• Proven experience directing AI coding/agent tools like Claude Code, Cursor, or Copilot.

• Expertise in integrating or creating tools for SIEM, SOAR, vulnerability management, and CSPM platforms.

• Experience implementing security controls through Infrastructure-as-Code using Terraform or CloudFormation, primarily within AWS.

• Capability to investigate logs, trace events, and contribute to incident analysis processes.

• Ability to influence and work collaboratively across engineering, infrastructure, product, and IT teams.

• Excellent written communication and documentation abilities.

• Experience in using and securing Kubernetes, including workload security and service mesh controls.

🏝️ Benefits

• Bonus or incentive compensation may be available.

• Equity may be available.

• Comprehensive benefits package.

• Pre-employment checks and recruiting processes aligned with applicable legislation and Abnormal AI policies.