Senior Security Engineer
Core
Champion secure coding practices, build internal security tools and automation, and integrate security scanning into the SDLC for an AWS and Kubernetes SaaS platform.
Role type
Senior Security Engineer (Application Security)
Builds
Internal security tools, automation, secure libraries, CI/CD guardrails, and self-service workflows
Domain
Cloud Security / Application Security
Required skills
Secure coding practices, vulnerability analysis (OWASP Top 10, CWE), SAST/DAST/SCA/secrets/container scanning integration, AWS, Python, CI/CD pipelines, Kubernetes, GitLab, Jira
Preferred skills
Regulated/healthcare software experience, OSCP/GWAPT/CSSLP/CISSP, HL7/FHIR/DICOM, threat modeling, Terraform, policy-as-code, IAM, network segmentation, CSPM
Technologies
Python, AWS, Kubernetes, GitLab, Jira, Orca, AWS GuardDuty, Docker, Terraform
Responsibilities
Conduct design reviews, threat modeling, and code reviews; Build internal security tools and automation; Integrate security scanning into CI/CD; Triage and remediate cybersecurity findings; Mentor teammates and provide secure coding guidance
Seniority
Senior, hands-on IC
