Security Engineer

Skills

About the Role

You will build and operate security controls for cloud infrastructure, applications, employee systems, AI agents, and developer tools. You will investigate threats, write and test controls, automate security operations, reduce supply-chain risk, and carry findings through remediation. You will work with system owners to improve detection, incident response, access controls, endpoint protection, audit evidence, and security documentation.

Requirements

• Typically 4+ years of relevant security, infrastructure, or software engineering experience with responsibility for implementing security controls.
• Hands-on experience with a major cloud platform.
• Strong foundation in identity, networking, operating systems, and access control.
• Depth in at least two areas: cloud security, detection and response, application security, vulnerability management, or corporate security.
• Experience investigating technical problems through logs and system behavior and following issues through resolution.
• Clear communication, practical judgment, and constructive working relationships with engineers and business teams.

Responsibilities

• Implement least-privilege access, phishing-resistant authentication, short-lived credentials, privileged access controls, and reliable provisioning and deprovisioning.
• Improve cloud configurations, credential storage, network protections, and secrets scanning.
• Secure AI agents and developer tools through permissions, execution isolation, network restrictions, audit trails, and safeguards against prompt injection and tool misuse.
• Correlate identity, cloud, workload, and CI/CD telemetry to detect suspicious activity and data exfiltration.
• Investigate attacks, reduce alert noise, and test response procedures including session revocation and credential rotation.
• Assess dependencies, CI/CD workflows, third-party integrations, and developer environments for supply-chain risks.
• Evaluate vulnerabilities and active exploitation, apply mitigations with service owners, and verify responses.
• Automate access reviews, configuration checks, evidence collection, and remediation tracking using code and APIs.
• Maintain endpoint protections, device security baselines, identity and SaaS controls, audit evidence, and runbooks.

Benefits

• Medical, dental, vision, life, and AD&D insurance, with 100% coverage for US Gold plans and 80% coverage for dependents.
• Meaningful early-stage equity and stock option grants for every full-time employee.
• Flexible, trust-based paid time off that meets or exceeds local statutory vacation requirements.
• Company-sponsored 401(k) plan in the US.