Senior Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Design and deliver fundamental security platform systems within the Lumos codebase, which includes request context propagation, scoped API tokens, authorization services, and the separation of authentication from synchronized identities.

• Oversee multi-sprint security initiatives from inception to completion and collaborate with engineers across various teams.

• Conduct security architecture evaluations and threat modeling for new products, such as the MCP Governance gateway and on-device policy verification.

• Transform security findings into actionable, prioritized tasks.

• Promote least-privilege access to production systems, databases, data pipelines, AWS IAM, and sensitive information.

• Assess, route, and remediate vulnerabilities identified through penetration tests, cloud evaluations, and dependency scanning; manage retesting efforts.

• Engage in security on-call duties and incident response activities.

• Address security inquiries from customers and prospective clients.

• Establish security foundations for Lumos’s identity platform and provide security guidance to customers.

⛳️ Requirements

• A minimum of 5 years of software engineering experience, with at least 3 years dedicated to security (application, product, or platform security).

• Proven track record in designing, deploying, and maintaining production security systems, including authentication and authorization frameworks, token and session management, secrets management, or audit logging.

• Strong backend development skills.

• Proficiency in Python and TypeScript is highly desirable; experience with Go is also welcome.

• Excellent written communication skills.

• Practical experience with threat modeling, secure design reviews, and identifying and rectifying vulnerabilities in actual codebases.

• Experience in securing cloud infrastructure on AWS, including IAM and Infrastructure as Code; equivalent experience with GCP or Azure will be considered.

• Preferred qualifications: Familiarity with OAuth 2.0, OIDC, SAML, SCIM, OPA, Zanzibar-style models, Cedar, SOC 2, ISO 27001, IAM, and/or experience in a growth-stage startup.

• Must be eligible to work in the United States or Canada; the application will inquire whether sponsorship is necessary for employment in Canada or the United States.

🏝️ Benefits

• Remote-first culture – Work from anywhere within ±4 hours of Pacific Time.

• Medical, dental & vision insurance – 100% of premiums covered for employees, 60% for dependents. HSA and FSA available with employer contribution. International benefits align with local standards.

• Mental health support – Access to mental health resources and support.

• Monthly wellness stipend – A monthly stipend for gym memberships, fitness apps, and whatever helps you recharge.

• Life & disability insurance – Life insurance, short-term disability, and long-term disability coverage available.

• Flexible PTO – Flexible time off with a minimum annual requirement.

• Parental leave – Up to 16 weeks of paid parental leave for expecting parents.

• $1,000 annual learning stipend – An annual budget for courses, books, conferences, and certifications.

• Company & team offsites – Company and team bonding trips throughout the year, fully covered by Lumos.

• 401(k) with matching – Employer 401(k) matching.