Staff Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Establish architectural standards that safeguard employees, customers, and core systems within cloud environments and applications.

• Integrate security throughout the development lifecycle by utilizing threat modeling, conducting design reviews, providing secure libraries, and implementing CI checks.

• Develop security metrics and scorecards to demonstrate the risks mitigated to leadership, aligning security expenditure with critical risks and compliance requirements.

• Ensure secure AI adoption by creating architectures, threat models, and runtime protections for production AI systems.

• Streamline vulnerability management, threat detection, and security operations through the application of AI and other technologies.

• Offer technical expertise during design reviews and collaborative sessions.

• Manage the security tooling stack and make informed build-versus-buy decisions.

• Regularly engage in the security engineering team's on-call rotation.

⛳️ Requirements

• Over 10 years of experience in security, covering security operations, product security, infrastructure security, and application security.

• Proven experience in establishing architectural direction via roadmaps, standards, and secure reference patterns implemented by various business units.

• Background in integrating security into the development lifecycle through threat modeling, design reviews, and secure defaults.

• Extensive technical knowledge across AWS cloud and traditional enterprise security frameworks.

• Practical experience in constructing proof-of-concepts and resolving issues in malfunctioning systems.

• Proven track record of managing security metrics programs that inform prioritization and drive impact.

• Experience in designing systems that adhere to best practices and regulatory mandates, successfully passing audits through design.

• Hands-on expertise in securing AI systems, from threat modeling to runtime defense.

• Familiarity with leveraging AI to automate security tasks.

• Strong communication skills with the ability to engage non-security stakeholders, build consensus, and influence engineering leadership.

• A Bachelor's or Master's degree in Computer Science, Cybersecurity, or a related technical discipline, or equivalent practical experience.

• CISSP certification is a plus.

• Additional points for experience in offensive security, including penetration testing, red teaming, or exploit development.

• Extra consideration for experience in attacking AI systems.

• Candidates must be on camera for virtual interviews.

🏝️ Benefits

• Competitive bonus structure.

• Equity offerings available.

• Flexibility to work from any location across the US.

• Reasonable accommodations provided throughout the hiring process.