Staff Security Engineer

This is a fully remote position, open to applicants in New Zealand.

📋 Description

• Develop Code in the Platform: Engage directly with the Auror codebase by writing patches, addressing vulnerabilities, refactoring suboptimal patterns, and implementing changes.

• Create Security Tools and Automation: Develop tools, automation, and detection systems that enhance the security team's effectiveness.

• Application Security and Vulnerability Resolution: Spearhead threat modeling and architectural reviews for significant platform modifications.

• Platform and Infrastructure Security: Collaborate with SRE and Platform teams on cloud and infrastructure security initiatives. Write Terraform scripts, build pipelines, and contribute to platform-as-code efforts.

• AI Security and AI-Enhanced Engineering: Assist in defining and strengthening the way Auror integrates and safeguards against AI technologies.

• Detection and Response: Work alongside the Blue Team workstream to design and fine-tune detection systems.

• Customer Security and Assurance: Serve as a credible technical representative when enterprise clients require in-depth insights.

• Standards, Patterns, and Mentorship: Establish technical guidelines for security controls, tooling, and architectural design.

⛳️ Requirements

• Proven experience in writing production code and deploying changes that are utilized in real-world systems by actual users.

• Ability to navigate unfamiliar codebases—tracing issues to their sources, creating pull requests, and collaborating with responsible teams to merge and deploy changes.

• Practical experience with cloud platforms (GCP preferred, Azure or AWS acceptable), CI/CD pipelines, and infrastructure-as-code (Terraform or equivalent).

• Extensive technical knowledge of various classes of security vulnerabilities and the ability to design them out rather than merely identify them.

• Robust application security expertise—threat modeling, architecture reviews, SAST and DAST, secure SDLC—with the engineering skills to act on identified issues.

• Familiarity with AI and LLM security challenges—prompt injection, data leakage, model and tool-use supply chain—and a pragmatic perspective on safe AI development.

• Proficient and comfortable using AI engineering tools (such as Claude Code/Gemini or similar) to expedite work delivery.

• Experience with SIEM tools—writing queries, developing detections, and conducting log analysis.

• Comfort in partnering with SRE and Platform teams on production systems and facilitating changes collaboratively.

• Excellent communication skills—articulates the rationale behind security decisions in a manner that engineers respect.

• Demonstrates curiosity, humility, and the capability to lead projects independently in uncertain environments.

• Exemplifies thoughtful, composed decision-making under pressure, particularly during incidents.

🏝️ Benefits

• Competitive salary range: $150,000-$170,000, based on level of experience.

• Annual bonus: Eligibility for a NZD $5,500 bonus at the end of the financial year contingent upon achieving our revenue targets together.

• Employee share scheme: You’ll be part of a company that is making a significant impact!

• Flexibility: We encourage a healthy work/life balance.

• Shorter work weeks (at full pay): Everyone enjoys Friday afternoons off.

• Health Care Plan: We prioritize your health by offering coverage through our premium health business insurance plan with nib health insurance.

• Emphasis on mental and physical health: We recognize the importance of wellness and have policies to support it, including Wellness Days and up to $750 for expert sessions each year.

• Family-friendly policies: We provide comprehensive paid parental leave—12 weeks for birth parents and 6 weeks for non-birth parents following birth, adoption, or surrogacy.

• Personal development: We encourage our team members to engage in courses, conferences, or events that enhance their skills.

• Team bonding: We host regular team lunches and social events, with the majority (if not all) activities occurring during work hours.