Staff Security Engineer

This is a fully remote position, open to applicants in New York.

📋 Description

• Take charge of team-level architectural security choices; investigate, design, and manage security frameworks.

• Lead and participate in extensive, intricate security projects; break down tasks, oversee execution, and identify potential risks.

• Actively identify and address security vulnerabilities.

• Advocate for security standards, testing methodologies, and observability practices.

• Guide senior engineers towards achieving Staff-level conduct.

• Coordinate multiple teams on the security strategy.

⛳️ Requirements

• Expertise in Ruby on Rails and PostgreSQL.

• Practical experience in security with AWS, infrastructure as code, and CI/CD at scale.

• Advanced knowledge of network security, operating systems (Linux), and cloud services.

• Familiarity with NIST, ISO27001, CIS MITRE ATT&CK, CSA CCM, SOC2, and GDPR frameworks.

• Proven experience in cloud security, API security, secure software development, threat modeling, identity and access management, network segmentation, vulnerability management, incident response, and compliance-focused security controls.

🏝️ Benefits

• Competitive compensation package that includes base salary, bonuses, and equity.

• Employer-sponsored 401(k) plan with matching contributions.

• Comprehensive medical, dental, and vision insurance coverage.

• Flexible time off policy and a hybrid work environment.