Staff Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Take charge of our strategy for AI and agentic security, implementing guardrails for agentic access to cloud and data, as well as ensuring the security of AI and ML workloads in our products.

• Develop and publish the organization's AI-security standard, promoting its adoption among other engineering teams.

• Manage our detection platform (Panther), overseeing detection strategy and coverage across cloud, container, and SaaS log sources while maintaining high-signal detection standards as our operations expand.

• Ensure incident-response readiness by creating plans, playbooks, and conducting tested tabletops aligned with the HIPAA breach-notification timeline, and provide leadership during actual incidents.

• Lead intricate security initiatives across teams from inception to completion, resolving uncertainties and collaborating with Platform, Engineering, and Compliance departments.

• Serve as the senior security resource for cloud security and security reviews, acting as the go-to expert for other engineering teams on critical decisions.

• Mentor colleagues aiming to deepen their security expertise, establish team standards for detection authoring and code review, and assist in elevating our interview and hiring standards.

• Develop and enhance security automation to extend the capabilities of a small team, while contributing to the tools utilized by the team.

• Participate in architecture reviews and threat modeling for our most high-risk designs, effectively communicating the resulting security architecture for team understanding and implementation.

⛳️ Requirements

• Over 8 years of experience in security and software engineering, with substantial hands-on expertise in AWS and cloud-native infrastructure, including proficiency with containerized workloads (EKS) and infrastructure-as-code (Terraform).

• Proven ability to lead complex security projects across teams and enhance the effectiveness of fellow engineers.

• Extensive knowledge in AI and agentic security, including securing LLM applications, agentic frameworks, and MCP, as well as defenses against prompt injection and agentic access.

• Strong background in threat detection engineering, including the design, authorship, and tuning of detections within a modern SIEM, along with the ability to assess coverage against actual threats.

• Experience in incident response, including developing response plans and executing them during actual events.

• Proficiency in writing production code (Python, Go, or TypeScript) and creating security tools, rather than merely configuring existing products.

• Excellent writing and communication skills; capable of publishing standards that other teams will adopt and articulating complex designs to a non-security audience.

• Familiarity with SOC 2 and HIPAA, along with the discernment to create controls that remain effective without hindering delivery timelines.

• Experience in mentoring and advancing the skills of other engineers.

🏝️ Benefits

• Medical, Dental & Vision – Comprehensive plans with leading insurance providers, covering 75% of your premiums, depending on the plan.

• Paid Parental Leave – Generous paid leave to support families through birth or adoption: Up to 12 weeks for parents.

• Remote-First Team – Work from anywhere in the U.S.

• Unlimited PTO & 10 Holidays – So you can relax and recharge.

• 401(k) with Traditional & Roth Options – Tax-advantaged retirement savings through Fidelity with a 4% match.

• Minimal Bureaucracy – A fast-moving, high-impact environment where you can focus on what matters.

• Incredible Teammates! – Work alongside smart, supportive, and mission-driven colleagues.