Senior Security Engineer

Job Summary

Leading the advancement of security tooling, the full-time remote Senior Security Engineer will manage the security toolchain, ensure compliance with cybersecurity standards, and enhance security operations while collaborating with engineering and product teams.

Key Responsibilities

• Own and evolve the security toolchain, including static application security testing and container scanning
• Tune controls to compliance requirements by translating NIST standards into enforceable pipeline policies
• Drive shift-left adoption by embedding security checks early in the software development lifecycle

Required Qualifications

• 7+ years in DevSecOps, application security, and security operations, with 3+ years owning security tooling in CI/CD pipelines
• Deep experience with configuring and enforcing security tools like SAST and SCA in production environments
• Proven ability to map security tooling to NIST SP 800-53 or RMF requirements and produce assessment evidence
• Scripting or automation experience in Python, Bash, or similar languages
• Security+ certification or ability to obtain within 2 months of hire