Senior Security Engineer

Role Description

We're looking for a Senior Security Engineer who is, first and foremost, an exceptional software engineer — one who has developed deep expertise in security along the way. This is not a governance-only or leadership-only role. You'll be expected to write code, review architecture, shape our SDLC, and get your hands dirty alongside our engineering team while also owning the strategic direction of our security program.

This role is ideal for a senior engineer who has organically grown into security.

This is not a CISO or pure security leadership position. We don't need someone to manage a security team or sit in meetings all day. We need someone who leads through doing — setting the standard by example, bringing pragmatic security thinking to every layer of our stack, and helping us build a security culture that scales with the company.

What You’ll Do

• Security Program Leadership
  • Own and drive the company’s security strategy, roadmap, and overall posture
  • Serve as the internal expert on security best practices and risk management
  • Partner cross-functionally to ensure security is embedded across engineering, product, IT, and legal
• Application Security & Secure SDLC
  • Lead threat modeling, secure code reviews, and architecture reviews
  • Define and enforce secure coding standards and vulnerability management processes
  • Drive adoption of SAST, DAST, SCA, and other security tooling
• Hands-On Engineering
  • Build and maintain security tooling, automation, and infrastructure as code
  • Implement security controls across application, API, and infrastructure layers
  • Partner with engineers on authentication, authorization, and data protection
• Infrastructure & DevSecOps
  • Own vulnerability scanning, patching, and incident response processes
  • Strengthen cloud security (IAM, networking, secrets, logging, monitoring)
  • Integrate security into CI/CD pipelines and automate security gates
• Compliance & Policy
  • Partner with Legal to develop and maintain security policies and standards
  • Lead or support compliance efforts (e.g., SOC 2, ISO 27001)
  • Stay ahead of evolving regulatory requirements

Qualifications

• 7+ years of hands-on software engineering experience
• Strong experience in application security (threat modeling, code review, SDLC integration)
• Experience securing cloud environments (AWS, GCP, or Azure), including IAM and networking
• Ability to operate both strategically and tactically—setting direction while staying hands-on
• Strong communication skills; able to translate security concepts into clear, actionable guidance

Nice-to-Haves

• Experience with compliance frameworks (SOC 2, ISO 27001)
• Familiarity with security tooling (SAST, DAST, SCA, SIEM, vulnerability management)
• Experience building security programs in startup or high-growth environments
• Relevant certifications (CISSP, CCSP, CSSLP, OSCP), though not required

Benefits

• Medical/Dental + Orthodontics/Vision Coverage
• 401k Match
• Flexible Paid Time Off
• Mindfulness First Fridays
• Monthly Technology Stipend
• Home Office Setup Stipend
• Professional Development Stipend
• Paid Parental Leave
• Charitable Donation Matching
• Volunteer Days