Software Engineer Security
FactoryVisit Factory website
Factory is an AI software-development platform that lets enterprises plan, build, review, test, and ship software with governed autonomous agents (“Droids”).
San Francisco, United States
About Factory
Factory provides a model-independent, enterprise software-development system spanning the SDLC, with deployment options including managed, private, on-premises, and air-gapped environments.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will design and manage security measures for cloud infrastructure, applications, and data. You will embed security practices in development, conduct code reviews and automated testing, respond to incidents, document processes, and lead security awareness training.
Requirements
- 5+ years of Security Engineer experience focused on product security
- Experience securing cloud-based environments and Infrastructure as Code security practices
- Proficiency in TypeScript and Python
- Application security, network security, security operations, and incident response expertise
- Container security experience with Docker and Kubernetes
- Knowledge of AWS services including VPC, EC2, Lambda, Amazon RDS, and S3
- Knowledge of CI/CD pipeline tools and practices
- Knowledge of security compliance frameworks including ISO 27001, SOC 2, and GDPR
- Experience with security assessments and third-party audits
- Proficiency with firewalls, IDS/IPS, vulnerability scanners, WAF, SIEM, and encryption solutions
Responsibilities
- Design, implement, and manage security measures for cloud infrastructure, applications, and data
- Integrate security practices into the software development lifecycle
- Conduct security code reviews
- Develop and implement automated security testing procedures
- Respond to security incidents
- Document security processes, procedures, and best practices
- Lead security awareness and training programs
- Stay current on security threats, vulnerabilities, and mitigation strategies