Senior Security Engineer

Job Summary

Owning the engineering side of security, the full-time Senior Security Engineer will manage vulnerability management, application security, and cloud security while working remotely and collaborating closely with Platform Engineering, Product, and DevOps teams.

Key responsibilities

• Oversee end-to-end vulnerability management, including pen tests and risk reporting for leadership and customers
• Implement application security measures such as SAST, DAST, and secure code review while providing guidance to engineers
• Ensure compliance with FedRAMP and GCC High requirements for cloud and infrastructure security in Azure and GCP

Required qualifications

• 5+ years of hands-on security engineering experience with expertise in vulnerability management, AppSec, and cloud security
• Strong cloud-native security experience, particularly with Azure and/or GCP, including Kubernetes and IaC security
• Proven experience with security tools such as vulnerability scanners, SAST/DAST/SCA, and EDR
• Proficiency in Python, Go, TypeScript, or Bash for building automation and custom tooling
• US citizenship required for compliance with FedRAMP and defense customers