Senior Security Engineer
Core
Senior Security Engineer responsible for supporting and enhancing cloud and application security practices, ensuring environments are secure and compliant.
Role type
Senior individual contributor security engineer (AWS)
Builds
Secure cloud infrastructure and application security posture for eCommerce advertising and sales software
Domain
Cloud security and application security in the eCommerce industry
Required skills
AWS security services (IAM, GuardDuty, Security Hub, AWS Config, CloudTrail), Infrastructure-as-code (Terraform, AWS CDK), SAST/DAST/SCA tools, vulnerability management, security compliance frameworks (SOC 2, ISO 27001, CIS Benchmarks)
Preferred skills
Threat modeling, secure SDLC practices, incident response procedures
Technologies
AWS, Terraform, AWS CDK, Snyk, Checkmarx, Veracode, Semgrep, CloudTrail, GuardDuty, Security Hub, AWS Config, Macie
Responsibilities
Implement and maintain AWS security configurations across environments, Apply IAM best practices and role-based access controls, Configure and monitor AWS-native security services, Participate in cloud security reviews for new and existing services, Support security best practices in infrastructure-as-code and CI/CD pipelines, Contribute to secure Software Development Lifecycle practices including shift-left security, Operate SAST, DAST, and SCA tools integrated into CI/CD pipelines, Assist in vulnerability identification, triage, and remediation tracking, Support internal and external penetration testing activities, Support compliance efforts such as SOC 2 Type II and ISO 27001 audits
Seniority
Senior, hands-on IC
