Senior Security Engineer

We're hiring multiple Senior Security Engineers (senior and above, potentially a manager as well!) to shape and scale the security strategy. This role is deeply technical, with 40–50% of your time spent writing secure code and automating workflows in TypeScript (you don't need TS experience but it is preferred). The remaining time includes driving strategy and providing light technical leadership (around 20%) to guide engineering teams toward more secure systems.

You'll work cross-functionally to embed security across our infrastructure and development lifecycle—from designing secure systems to integrating tooling into our CI/CD pipelines.

Logistics: 100% Remote in the US.

Compensation: $200-270k base salary with an equity package (some flexibility on base for stellar candidates).

What You'll be Doing:

• Write production-grade code (TypeScript or Python) to automate security tooling, processes, and detections

Interested in remote work opportunities in Cyber Security? Discover Cyber Security Remote Jobs featuring exclusive positions from top companies that offer flexible work arrangements.

• Lead the integration of security tools (SAST, SCA, secrets scanning) into CI/CD pipelines (GitHub Actions, Jenkins, CircleCI, TravisCI, Earthly)
• Secure our AWS cloud infrastructure using tools like SCP, IAM, GuardDuty, Security Hub
• Drive secure architecture for systems including auth, service-to-service communication, and RBAC
• Oversee and continuously improve the vulnerability management program across engineering
• Use observability tools (e.g., SIEM, Scout Suite, Prowler, Cloud Custodian) to proactively surface issues
• Apply risk frameworks (OWASP Top 10, CIS AWS Benchmark, CVSS v3) to assess and prioritize threats
• Mentor engineers and influence security best practices org-wide

Who you are:

• 6+ years in engineering roles focused on security, cloud, or infrastructure
• Strong, current software development skills (comfortable being within production-level code), with a focus on TypeScript (open to Python, Go, JavaScript, etc.)
• Experience automating security solutions, not just configuring them
• Deep knowledge of security concepts (threats, vulnerabilities, exploits, TLS, auth, etc.)
• Hands-on experience with AWS security tools (in particular AWS threat modeling), infrastructure as code (Terraform), and containerization (Kubernetes)
• Familiarity with CVSS v3, OWASP Top 10, and common vulnerability management practices
• Proven ability to lead through influence and technical guidance