Senior Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Design and create security tools driven by Python, such as vulnerability scanners, API security validators, and CI/CD security gateways utilizing Flask/FastAPI.

• Develop automation for Kubernetes security, including RBAC policy generators, runtime threat detection systems, and automated secrets rotation.

• Build self-service security tools featuring infrastructure-as-code validators and container compliance checks.

• Enhance GitLab CI/CD pipelines with tailored security automation, integrating SAST/DAST workflows and secrets detection.

• Create Grafana-compatible tools for the aggregation of real-time security metrics, log analysis, and threat visibility dashboards.

• Update legacy PHP systems through Python-based wrappers and migration pipelines.

• Collaborate with cross-functional teams to incorporate security tools into development processes.

• Advocate for security automation best practices within cloud-native environments.

• Address security incidents using custom tooling and automated remediation workflows.

• Mentor colleagues on secure development methodologies and tool architecture.

⛳️ Requirements

• Over 5 years of experience in security-oriented software development, showcasing expertise in tool creation.

• Advanced proficiency in Python, with production-level development using Flask/FastAPI, asynchronous workflows, and extensive testing frameworks.

• Practical experience with Kubernetes tooling, including operators, admission controllers, or custom security automation development.

• Hands-on experience in creating Grafana dashboards, collecting metrics, and customizing GitLab CI/CD pipelines.

• Basic knowledge of PHP to facilitate collaboration on legacy systems and modernization initiatives.

• Strong grasp of security automation principles and DevSecOps methodologies.

• Experience with container security, secrets management, and validation of infrastructure-as-code security.

• Capability to develop scalable security solutions compatible with existing development workflows.

• Proven history of creating self-service tools that minimize manual security efforts.

🏝️ Benefits

• 100% company-covered insurance premiums for employee medical, dental, and vision plans.

• 401(k) plan matching 100% up to 4%, with immediate vesting.

• Annual Professional Development Reimbursement of $2,500.

• 11 Holidays + Paid Time Off Accrual + Rollover Plan.

• Increased PTO at the 3-year and 10-year anniversary.

• 1 month of paid sabbatical every 5 years.

• Anniversary Bonus awarded each year.

• $500 stipend for remote office setup in the first year + $400 for each subsequent year.

• Internet reimbursement of up to $75 per month.

• Gym membership reimbursement of up to $50 per month.

• Company-paid Wellable subscription.