Security Engineer

Role: Security Engineer

Join Resilience to build, defend, and scale the security posture of its category-defining SaaS platform and internal corporate systems.

What you’ll do

• Own proactive security guardrails across Security, IT, and DevOps—moving beyond reactive monitoring and patching.
• Automate incident response by designing and maintaining automated response playbooks using orchestration/workflow tools (e.g., n8n, Tines, XSOAR) to reduce manual intervention.
• Advance agentic SecOps by developing custom SecOps applications and autonomous workflows to triage alerts and accelerate defense.
• Secure cloud infrastructure end-to-end by implementing Infrastructure as Code with Terraform across a multi-cloud footprint (AWS/GCP).
• Establish security guardrails for AI platforms and developer tools, mitigating risks such as prompt injection and data leakage.
• Collaborate cross-functionally with DevOps and IT to balance security requirements with developer velocity.

Mission focus (first 6 months)

• Deliver automated incident response playbooks and orchestration workflows.
• Launch early agentic security engineering efforts for alert triage and faster defense.
• Implement Terraform-based cloud security controls and AI/data-leakage guardrails.

Requirements

• 4+ years in Security Engineering, DevSecOps, or a high-level SecOps role.
• Automation mindset; proven ability with Python, Go, or low-code orchestration platforms.
• Hands-on experience securing AWS or GCP, including IAM, WAF/ALB, Fargate/Lambda.
• Deep experience with Infrastructure as Code (Terraform plus also mentioned CloudFormation/Pulumi) integrated into Git-based CI/CD.
• Practical experience with agentic AI tools (e.g., Cursor, Claude Code, GitHub Copilot) to accelerate secure development and auditing.
• Experience securing agentic developer tools / AI coding assistants, including governing model traffic via AI Gateways and the Model Context Protocol (MCP).
• Familiarity with container security, zero-trust networking (Zscaler), EDR (CrowdStrike/SentinelOne), and endpoint security profile management (MDM/Jamf).

Nice-to-haves / inferred focus

• Capability to architect permanent automated fixes by improving legacy processes.
• Strong security engineering depth across cloud, endpoints, containers, and AI governance.