Staff Security Engineer- Security and Compliance
Core
Staff Security Engineer providing hands-on technical leadership for product and application security, secure SDLC, vulnerability response, and AI security across cloud-native platforms.
Role type
Staff individual-contributor security engineer
Builds
Secure cloud and AI capabilities, secure SDLC processes, security tooling, and compliance evidence
Domain
Cybersecurity, Cloud Security, AI Security, Compliance
Deliverable
production ML models
Required skills
Application security, Secure SDLC, Cloud security (AWS/Azure/GCP), LLM security, Vulnerability management, Software supply chain security, Security assurance frameworks, Coding (Go/Python/Java/TypeScript)
Preferred skills
DSPM, Privacy engineering, FedRAMP Moderate, ISO/IEC 42001, OWASP LLM guidance, NIST AI RMF
Technologies
AWS, Azure, GCP, Kubernetes, SAST, SBOM, SLSA, CISSP, OSCP, Python, Go, Java, TypeScript
Responsibilities
Own and evolve secure SDLC including threat modeling and secure code review; Lead product vulnerability response and coordinated disclosure; Perform penetration testing and security research; Partner on technical controls for SOC 2, ISO 27001, and FedRAMP; Translate regulations like GDPR and EU AI Act into engineering requirements; Build reusable security libraries and enable developer security practices.
Seniority
Staff, hands-on IC with strategic influence
