Senior Security Engineer

Role overview

Later is hiring a Senior Security Engineer (remote, United States) to strengthen the company-wide security posture through hands-on engineering and pragmatic security standards. The role emphasizes application security, cloud/infrastructure security, secure development practices, vulnerability management, and compliance enablement—especially in support of SOC 2.

Responsibilities

• Company-wide security strategy & compliance
  • Assess and continuously improve Later’s overall security posture across applications, infrastructure, cloud environments, and corporate/vendor systems.
  • Define and implement scalable security standards, best practices, and guardrails to support SOC 2 readiness with automated, auditable controls.
  • Translate SOC 2 and related compliance requirements into sustainable technical/operational controls and evidence collection practices.
  • Identify security gaps, prioritize remediation, and support pragmatic, risk-based decision-making.
  • Promote security awareness and adoption of secure operating practices across business teams.
• Technical execution
  • Build and maintain internal security tools, automation, and services for secure development, compliance workflows, vulnerability management, and security operations/visibility.
  • Design and implement security controls in CI/CD (secure build/deploy patterns, security scanning, dependency management, container scanning, secret management).
  • Support application security (secure design reviews, threat modeling, code review guidance, API security, microservices security patterns, remediation planning).
  • Improve cloud and corporate system security via hardening, monitoring, configuration reviews, and Infrastructure-as-Code security.
• Cross-functional partnership
  • Partner with Engineering, Infrastructure, Product, IT, Legal, People, Finance, and other business functions to embed security into systems, tools, workflows, and operating practices.