Senior Security Engineer

We’re hiring a Senior Security Engineer to help shift security left across product and platform teams, while also supporting internal corporate security needs. You’ll drive impact through enablement, automation, and practical risk reduction.

Why this role matters

You’ll secure both what we build and how we work. That means embedding security into our products and CI/CD, and also supporting internal teams.

Security here is not a gate; it’s a force multiplier. You’ll help engineering teams move faster safely, and ensure our colleagues have a secure foundation to do their best work.

Success means faster, safer releases and fewer reactive security escalations.

What will you do?

As a Senior Security Engineer, your mission will be to:

• Partner with developers to embed security into design, build, and deploy stages
• Automate vulnerability triage and mitigation flows
• Secure CI/CD pipelines (GitHub, Jenkins) and execution environments (Kubernetes, Docker)
• Tune WAFs, manage cloud security (AWS, GCP, Azure), and evolve Terraform practices
• Support internal teams with secure production accesses, endpoint hardening, and access policies
• Lead security reviews across app, infra, and corporate environments
• Advocate for security standards with clarity and empathy

You might be a fit if you:

• See security as an enabler of speed, not an obstacle
• Are comfortable in cloud and on-prem worlds
• Value autonomy, and naturally take ownership from idea to execution
• Can zoom out to prioritize risks and zoom in to fix root causes
• Communicate clearly with devs, ops, and business teams alike
• Eager to work in a technically challenging environment

You’ll grow by working with:

• Terraform, Docker, Kubernetes
• Modern security tools
• GitHub Actions, Jenkins
• AWS, Azure, GCP
• Teams building external-facing services (web apps, APIs) and internal platforms (CI/CD, admin tooling) to embed security by design.
• Supporting a public company environment with compliance requirements across multiple standards, including SOC 2 and ISO 27001

Skills that help (we’ll support your growth):

• Application Security: code review, threat modeling, WAF
• CloudSec: IAM, policy-as-code, workload hardening
• On-Prem/Corporate: endpoint protection, monitoring and production access control
• Communication: making risk visible and actionable

The Team Environment

You’ll join a cross-cultural, globally distributed security team that thrives on collaboration, curiosity, and continuous learning. We bring together a wide range of experiences and backgrounds to solve meaningful problems.

We support each other through knowledge sharing sessions, workshops, and async collaboration. You’ll have the chance to attend industry conferences, participate in internal guilds, and continuously sharpen your skills using our dedicated security training platform.

How we work:

• Autonomy with alignment: own your work, stay connected to purpose
• Bias for action: ship, learn, improve
• Enablement mindset: security exists to empower teams, not slow them down
• Simple and pragmatic: perfect is the enemy of shipped