Senior Security Engineer

Description What we’re looking for: Come join our founding security team as a Senior Security Engineer, helping build and scale the security foundations of our platform and engineering organization. You’ll join a small, high-impact team with strong ownership and the opportunity to build security capabilities, processes, and internal tools from the ground up. This is not a traditional DevSecOps role focused only on pipelines and security tools. You’ll partner closely with engineering leadership to design, implement, and operate security across the organization. The role spans security engineering, automation, and architecture across areas such as cloud security, application security, identity, incident response, and AI security, while helping build security processes, developer practices, and internal tooling. What you’ll do: Design and implement security controls across cloud infrastructure, applications, and internal systems. Secure our AWS and Kubernetes environments, including IAM, identity architecture, network policies, and secrets management. Build automation and internal tooling to improve security processes and reduce manual work. Integrate security into the development lifecycle (SDLC) and CI/CD pipelines. Perform threat modeling and proactively identify and mitigate security risks. Analyze risks related to third-party services, integrations, and supply chain dependencies. Improve monitoring, detection, and incident response capabilities across the platform. Evaluate, implement, and manage security technologies across the organization. Help improve visibility into security posture across engineering, including vulnerability management and security metrics. Collaborate with engineering teams to design secure architectures and improve the overall security posture. Contribute to defining security policies, standards, and engineering best practices. Explore and help define security practices for emerging technologies used by the company, including AI-driven development workflows. Requirements What You’ll Bring: Strong background in DevOps, Platform Engineering, DevSecOps, or Security Engineering Hands-on experience securing cloud infrastructure (preferably AWS) Experience working with Kubernetes in production environments Strong programming or scripting skills (Python, Go, or similar) Experience integrating security into CI/CD pipelines and development workflows Solid understanding of modern application, infrastructure, and cloud security principles Experience operating and supporting production systems at scale Ability to analyze complex systems and think about security from an attacker’s perspective. Strong communication skills with the ability to collaborate cross-functionally with engineering teams Nice to Have: Background in threat modeling and security architecture reviews Knowledge of identity and access management platforms (e.g., Auth0, Okta) Exposure to incident response and security monitoring processes Familiarity with security and compliance frameworks (e.g., SOC2, ISO 27001) Experience working in cybersecurity companies or large-scale SaaS environments Hands-on work with security automation or internal security tooling Understanding of third-party security risk and vendor integrations