Senior Security Engineer (all genders)
Core
Own product and cloud security end-to-end, including threat modeling, security reviews, CI/CD tooling, AWS infrastructure hardening, detection/response, and compliance controls.
Role type
Senior hands-on IC security engineer
Builds
Cloud security tooling, detection and response capabilities, security guardrails, and compliance evidence
Domain
B2B SaaS / Construction technology / Cloud security
Required skills
threat modeling, security reviews, secure-by-default patterns, CI/CD pipeline security, AWS infrastructure hardening, IAM architecture, network segmentation, encryption, logging, workload security, policy-as-code, vulnerability disclosure management, penetration testing program leadership, incident response leadership, compliance controls (ISO 27001, SOC 2, GDPR), risk-based decision making, software engineering
Preferred skills
detection engineering, ISO 27001 / SOC 2 certification experience, OSCP or CISSP certification
Technologies
AWS, GCP, Azure, SAST, dependency scanning, container scanning, secret detection, policy-as-code
Responsibilities
Own product and cloud security end-to-end; Harden AWS infrastructure and encode baselines as policy-as-code; Build detection and response capability from the ground up; Own vulnerability disclosure and pentest programs; Back compliance work with technical controls; Shape security direction as a hands-on senior IC
Seniority
Senior, hands-on IC
