Senior Security Engineer

This is a fully remote position, open to applicants in Arizona, +7 more states.

📋 Description

• Take ownership of and consistently enhance security across applications, infrastructure, internal systems, and business operations.

• Conduct security-centric code reviews and collaborate with engineers to implement necessary fixes.

• Execute hands-on penetration testing and vulnerability assessments on web applications, APIs, networks, and infrastructure.

• Ensure the security of internal and external APIs through effective authentication, authorization, access controls, and credential management.

• Oversee identity and access management, encompassing permissions, RBAC, least-privilege policies, and access audits.

• Set security standards for internal tools, third-party services, cloud environments, and production infrastructure.

• Lead initiatives to raise employee security awareness, including phishing simulations, social engineering testing, and security training.

• Recognize risks within employee workflows and implement technical or procedural safeguards.

• Establish and maintain processes for security monitoring, vulnerability scanning, threat detection, and incident response.

• Integrate automated security checks into development workflows, such as code scanning, dependency auditing, and CI/CD security controls.

• Investigate security incidents, determine root causes, and implement improvements to prevent recurrence.

• Proactively identify, prioritize, and execute security initiatives based on business risk and impact.

• Collaborate across departments to address security challenges beyond conventional engineering responsibilities.

⛳️ Requirements

• Significant professional experience in security engineering, application security, infrastructure security, or a related field.

• Capability to manage personal time effectively, establish priorities, and drive projects from conception through execution.

• Comfortable taking ownership of challenges beyond a narrowly defined job description.

• Eagerness to investigate issues, write code, configure systems, and implement solutions personally.

• Strong knowledge of application security, secure coding practices, and OWASP's common vulnerabilities.

• Experience with penetration testing, vulnerability assessments, and security testing tools.

• Solid understanding of API security, including authentication, authorization, OAuth, access tokens, and credential management.

• Experience in managing IAM, RBAC, MFA, SSO, and least-privilege access policies.

• Strong fundamentals in Linux, networking, Docker, and cloud infrastructure security.

• Experience securing production applications, databases, internal tools, and cloud environments.

• Familiarity with SAST, DAST, dependency scanning, and secrets detection.

• Ability to assess human security risks, such as phishing and social engineering.

• Strong problem-solving abilities and practical security decision-making skills.

• Capacity to communicate security risks to both technical and non-technical personnel.

• Comfortable working independently in a fast-paced environment with evolving priorities.

• Practical approach to balancing risk reduction, usability, and business requirements.

• If located in the USA, applicants must reside in Arizona, Idaho, Indiana, Ohio, Michigan, New York, Pennsylvania, Texas, or Washington.

• Preferred: experience as an early security hire or ownership in a startup; security of hosting platforms, SaaS, or large-scale infrastructure; knowledge of Cloudflare, AWS, and bare-metal infrastructure security; familiarity with PHP/Laravel, REST APIs, and MySQL; expertise in GitHub security workflows and supply-chain security; experience with red-team exercises, phishing campaigns, and social engineering simulations; knowledge of SIEM, intrusion detection, centralized logging, and threat intelligence; experience with endpoint security and device management; ability to build security processes and tools from the ground up; OSCP, CISSP, GIAC, or equivalent demonstrated experience.

🏝️ Benefits

• Competitive salary and performance-based incentives.

• Comprehensive health, dental, and vision coverage.

• Opportunities for professional development and continuous learning.

• Flexible work hours and remote work options.

• Supportive and inclusive workplace culture.