Senior Security Engineer

Role: Senior Security Engineer

You will serve as a trusted security advisor to leadership and partner teams, helping ensure enterprise AI and applications are built securely without slowing delivery.

Responsibilities

• Serve as trusted advisor by clearly articulating business risks tied to security issues.
• Lead security operations functions, including:
  • Vulnerability management
  • SAST and DAST
  • Detection engineering
  • Incident response
  • Running these in CI/CD and cloud-native production environments
• Integrate security into the software development lifecycle.
• Collaborate with product and development teams to ensure secure build and deployment while maintaining agility.
• Drive and support:
  • Bug bounty program
  • Application security reviews
  • Threat modeling (including code review and dynamic testing)
• Assess and integrate security tools to automate and scale security processes (evaluate open-source vs vendor options).
• Gather and analyze security metrics, including handling cross-team dependencies.
• Employ a developer-friendly, flexible approach that considers developer concerns.

Requirements

• 5+ years of experience in Application/Product Security or Security Operations, with strong security tool onboarding and optimization.
• Knowledge of vulnerability management, network security, and cloud security concepts and best practices.
• Comfortable operating with ambiguity and making informed decisions with limited data.
• Ability to make trade-offs between build vs buy; help build solutions and review existing tools.
• Hands-on secure engineering skills; can clearly communicate problem statements and propose solutions to both technical and non-technical audiences.
• Deep understanding of common security vulnerabilities, risks, countermeasures, and compensating controls.
• Interest in automating security controls.

Nice-to-haves / Additional signals

• Experience with CI/CD security and detection engineering in cloud-native environments.
• Strong emphasis on automation and scaling security processes.