Staff Security Engineer, Enterprise Security Engineering

Staff Security Engineer – Enterprise Security Engineering Aurora hires talented people with diverse backgrounds who are ready to help build a transportation ecosystem that will make our roads safer and mobility more efficient and accessible for all. The role reports to the Technical Lead Manager of Security Engineering. This position focuses on designing, building, and owning enterprise security platforms, integrations, and automation that power Aurora's internal security posture at scale. Responsibilities Own the architecture and implementation of Aurora's enterprise security controls — designing systems and integrations that protect endpoints, identities, internal infrastructure, and SaaS environments. Design and build Aurora's security telemetry and detection infrastructure, including log pipelines, SIEM integrations, and alerting frameworks in partnership with the Security Operations Engineer. Define and enforce enterprise security standards, conducting architecture and design reviews to ensure alignment with Aurora's security posture and risk tolerance. Partner with IT, Infrastructure, and Engineering teams to embed security requirements early, shifting left on corporate IT initiatives to avoid technical debt. Build automation and tooling that extends the capabilities of Aurora's security platforms, reducing manual operational burden and scaling the team's impact. Serve as the escalation point for enterprise security incidents requiring engineering-level investigation or remediation, and participate in the team's on-call rotation. Translate security strategy into concrete, executable engineering projects with clear milestones and measurable outcomes. Required Qualifications 12+ years of enterprise security engineering or corporate information security experience, specifically securing employee-facing systems, endpoints, identities, and internal infrastructure. Proficiency in at least one programming language used in a security context, writing production-quality automation, integrations, or internal tooling (Go or Python). Experience architecting and integrating enterprise security platforms across domains such as EDR/XDR, MDM, IAM/IGA, DLP, SaaS security, cloud security, or PKI. Experience designing and building security telemetry pipelines and detection infrastructure — log ingestion, normalization, SIEM integration, and alerting architecture. Experience leading cross‑functional security engineering projects, defining scope, driving execution, and aligning stakeholders across Engineering and IT. Track record of conducting security architecture reviews and translating findings into actionable, risk‑prioritized remediation plans. Experience evaluating security posture and identifying systemic gaps with a bias toward building durable solutions rather than one‑off fixes. Desirable Qualifications Experience with Zero Trust architecture and identity‑centric security models (BeyondCorp‑style or similar). Familiarity with NIST CSF, MITRE ATT&CK, and CIS Benchmarks used to inform engineering designs. Hands‑on AWS security experience (SCPs, GuardDuty, Security Hub, IAM, etc.) and integrating cloud security signals into a corporate security platform. Experience with applied cryptography and PKI in a production enterprise environment — certificate lifecycle management, CA design, or secrets management. Familiarity with securing AI/ML platforms or applications built on LLMs, RAG pipelines, or MCP‑based architectures. Security certifications such as CISSP, GCED, GREM, or similar (valued but not required). Benefits The base salary range for this position is $189,000 – $274,000 per year. Aurora’s pay ranges are determined by role, level, and location. The successful candidate’s starting base pay will be based on job‑related skills, experience, qualifications, education, and market conditions. Candidates will also be eligible for an annual bonus, equity compensation, and benefits. Our commitment to safety, inclusion, and equal opportunity is outlined below. Aurora considers candidates without regard to race, color, religion, national origin, age, sex, gender, gender identity, sexual orientation, marital status, pregnancy status, parent or caregiver status, ancestry, political affiliation, veteran and/or military status, physical or mental disability, or any other status protected by federal or state law. Aurora also considers qualified applicants with criminal histories, consistent with applicable law. We provide reasonable accommodations for qualified individuals with disabilities or disabled veterans. If you need assistance due to a disability, contact View email address on click.appcast.io. For California applicants, information collected and processed as part of your application is subject to Aurora’s California Employment Privacy Policy. #J-18808-Ljbffr Aurora CO