Security Engineer

Job Summary

Owning the identity program, cloud security posture, and vulnerability management, the full-time remote Security Engineer will serve as a core incident responder, build automation for security processes, and monitor external attack surfaces using the company's own product.

Key responsibilities

• Manage identity and access programs, reducing manual provisioning and enhancing non-human identity management
• Continuously improve cloud security practices, focusing on IAM, network segmentation, and posture monitoring in a GCP-first environment
• Lead vulnerability management efforts, prioritizing risks based on exploitability and exposure while partnering with engineering for remediation

Required qualifications

• 5+ years of experience in security engineering, with expertise in identity and access management, cloud security, or vulnerability management
• Hands-on experience with identity operations including SSO/SAML/OIDC and MFA, with familiarity in Duo and Google Workspace preferred
• Experience securing cloud-native environments, preferably GCP, with a strong background in AWS or Azure
• Proficiency in scripting and automation using Python, Go, or similar languages for building tooling and API integrations
• Demonstrated incident response experience, particularly as a primary responder on high-severity incidents