From the listing
About the role
As a Staff Security Engineer, you will embed security into architecture and processes by partnering early with Product and Software Engineering teams. You will be a hands-on technical lead capable of influencing outcomes across application security, cloud security, and security automation.
What you'll do
- Partner with Engineering, DevOps, and Product to provide security input at any phase of design or build.
- Guide secure design and code review for web and mobile applications and manage core AppSec tooling.
- Triage and remediate application-level vulnerabilities with engineering teams.
- Contribute to cloud security posture across the AWS environment using CNAPP and AWS-native tooling.
- Support cloud and application vulnerability management and tune WAF rules.
- Build automation and internal tooling in Python to reduce manual work.
- Contribute to security log pipelines, SIEM detections, and endpoint security controls.
- Embed security checks like scanning and secrets detection into CI/CD pipelines.
- Develop secure development and infrastructure standards and playbooks.
What they're looking for
- 8+ years of hands-on security engineering experience.
- Strong depth in one of: application security, cloud security, or security automation and tooling.
- Working knowledge of threat modeling.
- Ability to operate independently and drive projects without day-to-day oversight.
Nice to have
- Expertise across multiple domains (AppSec, Cloud Security, Automation).
- Hands-on Infrastructure as Code experience, ideally Terraform.
- Red teaming or offensive security experience.
- PCI-regulated or financial services environment experience.
- Mobile application security experience.
- AI/ML security exposure including prompt injection and data poisoning controls.
- Identity security across human and non-human identities.
- Development experience with Ruby on Rails, Python, or Go.
Members-only role.
Anything that names the company is hidden. Unlock this job for the company, the full listing and the apply link.
From the company page
Benefits
Work from anywhereUnlimited vacationWorkspace stipendHealth & wellness stipendRetirementPaid parental leavePaid holidays