Security Engineer

About the Role

We are looking for a hands-on Security Engineer with broad security experience to help secure our products and global multi-cloud infrastructure. You will work across security architecture, application security, incident response, and automation, taking ownership of security improvements from risk assessment through implementation and verification.

Responsibilities

Conduct threat modeling and security reviews for new features, services, and architectural changes. Identify attack surfaces, trust boundaries, and potential abuse scenarios, and work with engineering teams to implement and validate mitigations. Incident Response & Readiness: Develop and maintain incident response playbooks, lead regular exercises, and investigate and contain security incidents.

Perform root cause analysis and drive remediation and preventive measures to completion. Cloud & Infrastructure Security: Design, implement, and operate security controls across our cloud environments, covering identity and access management, network and workload security, secrets management, and security logging. Security Strategy & Execution: Identify and prioritize security risks across the organization, define practical security improvement plans, and drive implementation with engineering and business teams.

Security Automation: Build and maintain security tools and automated workflows for detection, assessment, and remediation. Integrate security checks and policy enforcement into development and operational processes. Compliance & Assurance: Implement and maintain technical controls supporting ISO 27001, ISO 27701, and SOC 2 requirements.

Work with relevant stakeholders to address control gaps and provide evidence for audits. Application Security & Vulnerability Management: Conduct security code reviews, vulnerability assessments, and penetration tests across applications and services. Prioritize findings based on exploitability and business impact, collaborate with engineering teams on remediation, and verify fixes.

Requirements

Bachelor’s degree in Computer Science, Computer Engineering, relevant technical field, or equivalent practical experience. 5+ years of relevant work experience designing, implementing, and continuously improving security systems at scale. Strong expertise in cloud security, with hands-on experience in at least two major cloud platforms (AWS, GCP, Azure) and native security tools (e.

g., AWS Security Hub, GCP Security Command Center). Linux system security skills, including hardening, log analysis, intrusion detection, and incident response. Proven ability to handle high-pressure security incidents and perform clear post-incident reviews. Strong knowledge of web and application security, with experience in penetration testing and code audits.

Experience developing security tools or automation scripts using Python, Go, or similar languages.

Preferred Qualifications

Recognized contributions to bug bounty programs or high-quality vulnerability reports. Professional certifications such as CISSP, CISA, OSCP, or AWS/GCP/Azure security certifications. Experience using AI tools to enhance development productivity. Personal projects or technical experimentation demonstrating self-learning abilities.

Experience working in international, distributed teams. Experience securing AI applications or agent systems, including tool authorization, prompt injection defenses, sensitive data protection, or execution isolation.