Senior Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Lead the architectural design and execution of security measures across cloud infrastructure, platform services, and AI integrations.

• Manage vulnerability assessments, threat modeling, incident response, and proactive security evaluations in AWS, Kubernetes, and AI application settings.

• Develop, oversee, and implement the organization’s long-term security strategy in collaboration with engineering and executive leadership.

• Integrate automated security testing, SAST/DAST, and AI-enhanced compliance checks into CI/CD pipelines and infrastructure-as-code workflows.

• Supervise IAM, secrets management, encryption standards, and zero-trust architecture frameworks.

• Assess, implement, and support internal AI security tools and third-party defensive solutions to combat AI-related threats.

• Facilitate threat modeling workshops and mentor teams on secure coding and infrastructure methodologies.

• Collaborate with product, infrastructure, data, and QE teams to weave security into the development lifecycle.

• Set up security monitoring, SIEM alerts, and incident response documentation.

• Test and implement defensive AI tools to enhance threat detection and minimize exposure risks.

⛳️ Requirements

• Extensive knowledge of cloud and application security, encompassing threat modeling, vulnerability scanning, penetration testing, IAM, secrets management, AI security, and compliance frameworks.

• Strong understanding of AWS infrastructure and security measures, including IAM, KMS, EKS, RDS, and S3.

• Experience in securing Kubernetes clusters, runtime security, container scanning, and enforcing network policies.

• Expertise in integrating SAST/DAST and security automation into CI/CD pipelines utilizing GitHub Actions.

• Solid programming or scripting abilities in Python, Go, or Bash for security tooling and automated remediation tasks.

• Practical experience with SIEM, security logging, automated threat intelligence, and AI-driven monitoring frameworks such as Prometheus, Grafana, Loki, or contemporary SOC tools.

• Proven leadership in advancing security initiatives, establishing policies, and advising engineering teams on security risks.

• Outstanding communication and stakeholder management skills, effectively balancing security needs with business agility.

🏝️ Benefits

• 401(k) plan with employer matching.

• Comprehensive PPO and High Deductible health insurance options within the Blue Cross Blue Shield network.

• Employer contribution to Health Savings Account (HSA) for those selecting the high deductible health plan option.

• Coverage for dental and vision care.

• Paid primary caregiver leave of 12 weeks.

• Additional leave of 6-8 weeks for birth-givers depending on delivery type, totaling 18-20 weeks of continuous leave.

• Generous vacation policy along with holidays.

• One mental health day per quarter.

• Annual budget for learning and development purposes.

• $100 monthly stipend for work-from-home expenses.

• Tele-mental health services provided through Headspace.

• Membership in OneMedical, including tele-health services.

• Personal health advocacy resources available via HealthAdvocate.

• Inclusive benefits for fertility, hormonal health, and family planning through Carrot Fertility.

• Access to the Axios “Axios Employee Support Fund,” designed to aid employees facing financial difficulties or emergencies.

• Enhanced work flexibility for parents and caregivers.

• Virtual social events sponsored by the company.

• A supportive and positive workplace culture.

• A commitment to fostering an open, inclusive, and diverse work environment.

• Continuous learning opportunities to build AI literacy and utilize AI tools to boost productivity, creativity, and efficiency.