Senior Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Implement and manage AWS security configurations across development, staging, and production settings.

• Apply IAM best practices, focusing on least-privilege access and role-based access controls.

• Set up and oversee AWS-native security services including CloudTrail, GuardDuty, Security Hub, AWS Config, and Macie.

• Engage in cloud security evaluations for both new and existing services.

• Advocate for security best practices within infrastructure-as-code and CI/CD pipelines.

• Maintain cloud security standards in accordance with CIS Benchmarks and the AWS Well-Architected Framework.

• Contribute to secure Software Development Life Cycle (SDLC) practices, particularly in shift-left security initiatives.

• Take part in threat modeling and security design evaluations.

• Operate Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA) tools integrated into CI/CD pipelines.

• Collaborate with engineering teams to address vulnerabilities and enhance secure coding practices.

• Support secure coding standards.

• Assist in identifying vulnerabilities, triaging them, and tracking remediation efforts.

• Support both internal and external penetration testing initiatives.

• Monitor and report on vulnerability metrics and the progress of remediation efforts.

• Assist with SOC 2 Type II and ISO 27001 audit compliance activities.

• Enhance security processes and documentation in collaboration with cross-functional team members.

• Contribute to the development of security runbooks and incident response procedures.

⛳️ Requirements

• 5–8+ years of experience in security engineering, cloud security, or a related domain.

• 3+ years of practical AWS security experience in a production environment.

• Familiarity with AWS security services such as IAM, GuardDuty, Security Hub, AWS Config, and CloudTrail.

• Experience with application security tools (SAST, DAST, SCA).

• Proficiency in infrastructure-as-code tools such as Terraform or AWS CDK.

• Understanding of vulnerability management practices.

• Knowledge of security and compliance frameworks (SOC 2, ISO 27001, CIS Benchmarks).

• Excellent communication skills and the ability to collaborate effectively with cross-functional teams.

🏝️ Benefits

• Flexible Paid Time Off.

• Paid Holidays and Floating Holidays.

• Medical, Dental, Vision, FSA/HSA, Life Insurance, and Pet Insurance.

• 401k with Employer Match.

• Take up to 2 Days of Paid Time Off to Volunteer with a 501c Organization.

• Paid Parental Leave.

• Additional annual bonus compensation through one of Pacvue’s highly attractive incentive plans.