Staff Engineer, Security

This is a fully remote position, open to applicants in United States.

📋 Description

• Design and uphold security tools, guidelines, and standards.

• Collaborate with DevSecOps teams to draft cloud-native security policies using Terraform.

• Conduct infrastructure-as-code scanning for IaaS deployments.

• Engage in threat intelligence and forensic analysis activities.

• Automate the process of mitigating vulnerabilities across cloud-based systems.

• Develop and manage SOC runbooks and documentation for incident response.

• Construct and oversee correlated SIEM event dashboards while establishing alert thresholds.

• Utilize AI-enabled IDEs for conducting security reviews of IaC, pull requests, and architectural designs.

• Validate security findings and recommendations generated by AI.

• Employ CNAPP to identify and prioritize risks related to cloud, containers, and pipelines, integrating outcomes with SIEM.

• Investigate AI-driven threats and convert them into detections, controls, and engineering guidance.

• Securely link AI tools to CNAPP, SIEM, and other security data sources using MCP.

• Evaluate security risks related to MCP servers, tool permissions, and data access.

• Correlate data from CNAPP and SIEM using AI, providing prioritized risk reports.

• Research, implement, and set up protections for email, hosts, and identities.

• Develop scripts to automate repetitive tasks.

⛳️ Requirements

• A Bachelor’s Degree in Computer Science or a related field, or a combination of education and experience that meets the required qualifications.

• Over 6 years of experience in systems engineering, software engineering, security, or a related field.

• Proficiency with Git, Jira, and Confluence.

• Relevant certifications in AWS, GCP, OCSP, CEH, or equivalent.

• Familiarity with Windows or Linux shell scripting and Python or a comparable programming language.

• Understanding of infrastructure-as-code tools such as CloudFormation and Terraform.

• Experience in deploying and managing enterprise-grade applications on AWS or similar cloud platforms.

• Knowledge of the Linux operating system.

• Familiarity with Ansible, Puppet, Chef, and containerization technologies.

• Understanding of Jenkins or equivalent continuous integration systems.

• Knowledge of relational and/or NoSQL databases, including Microsoft SQL Server, PostgreSQL, and MongoDB.

• Proficiency in Microsoft Office Suite.

• Familiarity with AI-assisted development and security tools like Claude Code.

• Understanding of the Model Context Protocol (MCP) and its security implications.

• Knowledge of CNAPP platforms, SIEM platforms, log correlation, and emerging AI-driven threats and defenses.

• Ability to work collaboratively as part of a team and communicate effectively.

• Capability to establish and maintain productive working relationships.

• Ability to analyze system behavior and assess the impact of changing conditions, operations, and environments.

• Capacity to thrive in a fast-paced environment, stay organized, prioritize tasks, multitask, and meet deadlines.

🏝️ Benefits

• Equal opportunity employer dedicated to diversity and fostering an inclusive environment.