Senior Security Engineer

Job Summary

Owning the security program for a leading SaaS platform, the full-time remote Senior Security Engineer will manage security and compliance initiatives, including SOC 2 Type II and HITRUST certification, while collaborating closely with engineering teams to enhance security measures across AWS infrastructure and AI-powered products.

Key responsibilities

• Lead the engineering side of SOC 2 Type II compliance, including control design and audit preparation
• Threat-model applications and infrastructure, raising security standards for the PHP/React stack on AWS
• Develop and enhance security scanning programs and detection capabilities, ensuring effective incident response and remediation

Required qualifications

• 5+ years of experience in application or infrastructure security within a SaaS environment
• Hands-on expertise with AWS security services, including IAM and VPC
• Proven experience contributing to SOC 2 Type II compliance efforts
• Familiarity with container security and infrastructure-as-code tools like Terraform
• Solid understanding of web application security fundamentals and experience securing AI/ML systems