Security Engineer III
Core
Strengthen cloud, application, and infrastructure security by identifying risks, implementing controls, automating processes, and ensuring compliance.
Role type
Senior hands-on Security Engineer
Builds
Secure AWS/GCP environments, CI/CD pipelines, Kubernetes/Docker/Terraform infrastructure, and security automation tools
Domain
Cloud security, DevSecOps, Application security
Required skills
AWS/GCP security, IAM, network security, encryption, CI/CD integration, Kubernetes, Docker, Terraform, vulnerability management, incident response, Python/Bash scripting
Preferred skills
SOC 2/ISO 27001 compliance, OWASP Top 10 knowledge, security tool familiarity (SonarQube, Snyk, Trivy, Checkov, Wiz)
Technologies
AWS, GCP, Kubernetes, Docker, Terraform, GitHub Actions, Jenkins, SonarQube, Snyk, Trivy, Checkov, Wiz
Responsibilities
Secure AWS and GCP environments including IAM, network security, encryption, logging, and access controls; Perform security reviews, vulnerability assessments, and penetration testing coordination; Integrate security scanning (SAST, DAST, dependency, container, IaC) into CI/CD pipelines; Secure Kubernetes, Docker, Terraform, Linux systems, and cloud infrastructure; Improve threat detection, security logging, alerting, incident response, and investigation processes; Identify, prioritize, and remediate vulnerabilities across applications, infrastructure, and dependencies; Support SOC 2, ISO 27001, customer security assessments, audits, and evidence collection; Build scripts and tools to automate security checks, reporting, and remediation; Investigate security incidents, perform root-cause analysis, and implement preventive measures; Partner with Engineering, DevOps, IT, and Product teams to embed security into everyday workflows
Seniority
Senior, hands-on IC