Senior Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Collaborate with engineering on design and architecture evaluations, threat modeling, and implementing secure-by-default practices for new services.

• Assess and strengthen Infrastructure-as-Code across various cloud environments such as EKS, Aurora, OpenSearch, S3, and IAM.

• Spearhead least-privilege IAM decomposition and enhance identity patterns across the platform.

• Assist with disaster recovery testing and resilience drills alongside the infrastructure team.

• Create and develop automation processes that ensure detection, response, and compliance activities are repeatable.

• Enhance and expand onboarding/offboarding automation, alert triage workflows, and identity/access anomaly detection systems.

• Develop internal tools that enable engineering teams to conduct self-service security posture assessments.

• Report directly to the VP of Information Security and work collaboratively with engineering teams.

⛳️ Requirements

• Over 5 years of experience in security engineering, with significant expertise in AWS security and Infrastructure-as-Code (Terraform/Terragrunt preferred).

• Solid understanding of Kubernetes/EKS security practices, including RBAC, network policies, pod security standards, image scanning, and cluster hardening.

• Excellent written communication skills.

• Proven experience in developing tools or automation solutions that address security challenges at scale.

• Prior experience with tools such as Crowdstrike, Wiz, and Security Hub.

• Proficiency in golang.

• Comfortable collaborating directly with software engineers during code reviews, design discussions, and incident responses.

• Experience with incident investigation and RCA tracking.

• Familiarity with supporting a SOC 2 (or similar framework) program from a technical/evidence perspective.

• Experience using Google Workspace as an identity/IdP source of truth.

• Self-motivated with the ability to manage problems from start to finish.

• Exposure to offensive security or red/purple teaming is preferred.

• Familiarity with Aurora or managed OpenSearch is a plus.

🏝️ Benefits

• Generous, flexible time off.

• Contributions to retirement/pension plans (e.g., 401k with match in the US; local pension schemes in other regions).

• Comprehensive healthcare benefits.

• Generous paid parental leave.

• Remote-friendly work environment with flexible arrangements.

• Support for home office expenses (phone & internet).