Senior Security Engineer

Skills

About the Role

You will secure our AWS environment, strengthening account baselines, identity and privileged access, detection and incident response. You will lead technical security projects, build controls and automation, work with Engineering and DevOps to resolve risks, write security standards and playbooks, and mentor junior engineers.

Requirements

• At least 5 years of experience in security engineering or a related role, including 2+ years securing production AWS environments
• Strong knowledge of AWS security including IAM, SCPs, network security, KMS and native detection services
• Understanding of container and Kubernetes security, particularly EKS
• Experience investigating cloud security incidents
• Experience with infrastructure as code, preferably Terraform, and automation using Python or similar
• Experience building SIEM detections and alerting
• Ability to prioritize meaningful risks
• Clear written and spoken English

Responsibilities

• Strengthen security across AWS accounts including AWS Organizations, SCPs and Control Tower guardrails
• Design and implement least privilege access including IAM Identity Center and temporary privileged access
• Build and tune detection and monitoring using CloudTrail, GuardDuty, Security Hub, AWS Config, VPC Flow Logs and SIEM
• Lead technical response to AWS incidents including investigation, containment, root cause analysis and post incident reviews
• Improve vulnerability and misconfiguration management with Engineering and DevOps
• Secure data, secrets and credentials using KMS, Secrets Manager and encryption controls
• Build security into infrastructure as code and CI/CD pipelines
• Develop security standards, runbooks and incident response playbooks
• Mentor junior engineers

Benefits

• Flexible Paid Time Off
• Equity Grant Opportunities
• Remote Work Flexibility
• Employer-paid Medical, Dental, and Vision benefits (US employees)
• 401(k) Retirement Plan (US employees)