Senior Security Engineer (Cloud & AppSec)
Core
Senior Security Engineer responsible for securing cloud infrastructure (AWS/GCP) and application security for a global SaaS platform.
Role type
Senior IC security engineer (cloud & AppSec)
Builds
Secure cloud environments, secure applications, and security tooling pipelines
Domain
SaaS, Cloud Security, Application Security
Required skills
AWS/GCP security, IAM, network segmentation, encryption, secrets management, SAST/DAST/SCA, CI/CD integration, security testing, incident response, threat modeling, Bash/Python/Go/Terraform
Preferred skills
DevOps experience, compliance audit preparation (SOC 2, CASA, PCI DSS, NIST CSF)
Technologies
AWS, GCP, SAST, DAST, SCA, CI/CD, Bash, Python, Go, Terraform, CDN
Responsibilities
Secure AWS and GCP environments including access management and network segmentation; Find and fix cloud misconfigurations and security risks; Set up security logging and monitoring; Test security of web, mobile, and network-based applications; Run and improve security scanning tools integrated into CI/CD pipelines; Participate in architecture reviews, threat modeling, and risk assessments; Handle security incidents including investigation, triage, and post-mortems; Prepare for SOC 2 and CASA audits.
Seniority
Senior, hands-on IC
