Senior Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Identify, prioritize, and address vulnerabilities within the Java-based platform and AWS infrastructure.

• Propel enhancements in infrastructure security, including refining IAM policies, protecting instance metadata, and controlling network egress.

• Perform security assessments of AI-assisted development pipelines, tool integrations, and services accessible by agents.

• Establish and uphold secure development standards, patterns, and guardrails for engineering teams.

• Collaborate with the fractional CISO on risk assessments, remediation strategies, and initiatives for PCI DSS compliance.

• Aid in incident response preparedness and enhancements in security monitoring.

• Convey security priorities and progress to both technical and executive stakeholders.

• Become a part of the Agentic Experience group, reporting to the Principal Engineer of Agentic Development.

⛳️ Requirements

• Over 7 years of practical experience in security engineering with a focus on application, cloud, or infrastructure security.

• Extensive experience with AWS security services and components, including IAM, VPC networking, and secrets management.

• Background in securing and working with large production codebases; experience in the JVM ecosystem is preferred.

• Knowledge of modern AI-assisted development tools and their associated security considerations.

• Excellent prioritization and communication abilities; capable of advocating for security investments with stakeholders.

• Relevant certifications such as CISSP, OSCP, or AWS Security Specialty are advantageous but not mandatory.

• Experience in the payments, fintech, or other regulated sectors is a plus.

• Security credentials such as AWS Security Specialty, CISSP, OSCP, or GIAC are valued.

• Experience in securing payments, ecommerce, or subscription/billing platforms.

• Familiarity with secure SDLC practices and the integration of SAST/DAST/SCA into CI/CD processes.

• Understanding of global, multi-currency, or tax-calculation systems and considerations regarding data sensitivity.

🏝️ Benefits

• Eligibility for the corporate bonus plan.

• A variety of employee benefits (details not specified).