Senior Security Engineer (US)

Job Summary

Owning the implementation of security controls and compliance measures, the full-time Senior Security Engineer (US) will build and maintain security systems across cloud infrastructure and SaaS products while collaborating with engineering teams to embed security into workflows.

Key responsibilities

• Build and maintain security controls across cloud infrastructure and SaaS products, including identity and access management and encryption
• Own the technical implementation of SOC 2 Type II and ISO 27001 compliance, automating control testing and maintaining audit artifacts
• Instrument and operate security monitoring and alerting across cloud environments, focusing on threat detection and response

Required qualifications

• 5+ years of hands-on security engineering experience, preferably in SaaS environments
• Deep practical knowledge of cloud security in at least one major platform (GCP, AWS, or Azure)
• Hands-on experience with SOC 2 Type II and ISO 27001 control implementation
• Experience building security automation across CI/CD pipelines
• Working knowledge of privacy regulations (HIPAA, GDPR, CCPA/CPRA) and experience implementing technical controls for compliance