Security Engineer

Responsibilities

• Select, deploy, and operationalize vulnerability scanning tools across production assets.
• Run vulnerability management end to end, including triage, severity assessment, ownership, remediation SLAs, and reporting.
• Build engineering-focused triage and remediation workflows and automate routing and follow-up.
• Create a remediation dashboard for engineering and leadership.
• Automate collection of vulnerability management evidence for compliance programs.
• Build automation and agentic tooling to reduce manual security operations work.

Requirements

• 5+ years of experience in security engineering, security operations, or software engineering, with a significant portion focused on security.
• Hands-on experience building or operating a vulnerability management program or security software tooling, including SCA, container, cloud, or host scanning.
• Engineering-first approach to triage and remediation, with the ability to make fixes easy to ship.
• Ability to determine the real severity of findings in context, using CVSS as an input.
• Strong scripting and automation skills in Go or Python and familiarity with infrastructure as code such as Terraform.
• Ability to explain security risks in business terms and determine appropriate remediation urgency.
• Preferred experience with real-time media, networking, or WebRTC systems.
• Preferred experience supporting HIPAA, PCI-DSS, ISO 27001, or SOC 2 compliance audits.
• Preferred incident response, application security, or AI security experience, including securing LLM applications or agent infrastructure.

Benefits

• Opportunity to build an impactful security program.
• Contribute to open source alongside experienced engineers.
• Competitive salary and equity package.
• Health, dental, and vision benefits.
• Flexible vacation policy.