Note: The job is a remote job and is open to candidates in USA. Spinwheel is a rapidly scaling, remote-first company investing in platform security, AI safety, and operational resilience. The Senior Security Engineer will own the technical security posture of the platform, infrastructure, and AI-driven systems by hardening production environments, remediating vulnerabilities, building AI security guardrails, and strengthening monitoring and incident response.
Responsibilities
- Secure and harden cloud infrastructure, applications, APIs, internal systems, and operational workflows
- Implement and maintain security controls across production environments, CI/CD pipelines, cloud infrastructure, and internal tooling
- Work directly with engineering teams to remediate vulnerabilities and improve secure development practices
- Ensure encryption, secrets management, logging, monitoring, and access controls are properly implemented and continuously maintained
- Design and improve security architecture across cloud-native and distributed systems
- Build scalable security processes that integrate directly into engineering and operational workflows
- Continuously identify, assess, prioritize, and remediate security vulnerabilities across infrastructure, applications, APIs, and operational systems
- Proactively search for weaknesses through vulnerability scanning, penetration testing, adversarial testing, threat modeling, and manual security reviews
- Coordinate remediation efforts across engineering and operations teams, and validate fixes to ensure long-term mitigation
- Improve detection and prevention capabilities for emerging threats
- Help establish a culture of continuous security improvement and operational accountability
- Secure AI-driven systems and automated agents against prompt injection, adversarial inputs, unauthorized or unintended actions, unsafe outputs, and data leakage
- Design and implement guardrails and validation layers for AI-generated actions
- Ensure AI systems safely handle untrusted inputs from IVRs, web systems, APIs, and human interactions
- Monitor AI system behavior for anomalies, abuse attempts, or unsafe decision-making
- Partner with engineering teams to ensure AI systems are observable, auditable, bounded, and fail safely
- Help define operational and technical controls for responsible AI deployment
- Improve and maintain security monitoring, alerting, logging, and incident response capabilities
- Investigate suspicious activity, anomalies, and potential security incidents
- Lead or support incident response efforts, root cause analysis, and remediation planning
- Ensure operational visibility into system health, access patterns, and security events
- Recommend and implement preventative measures following incidents or security discoveries
Skills
- 7+ years of hands-on experience in security engineering, infrastructure security, application security, DevSecOps, or offensive security
- Exceptional knowledge of the AWS ecosystem
- Demonstrated experience identifying and remediating vulnerabilities in live production systems
- Self-starter mindset: able to drive projects, make decisions, and prioritize ruthlessly in a fast-moving environment
- Strong communication skills, with the ability to explain technical security issues clearly to engineering stakeholders
- Experience securing AI/LLM-powered systems or automated agents
- Familiarity with prompt injection attacks, adversarial AI techniques, AI guardrails, and behavioral anomaly detection
- Experience with cloud security tooling, SIEM and observability platforms, penetration testing tools, endpoint security platforms, and infrastructure-as-code security
- Prior experience in high-growth startup, fintech, banking, or payments environments
- Certifications such as CISSP, CISM, AWS Security Specialty, or similar
Benefits
- 100% remote-first culture (work anywhere in the US or Canada)
- Equity opportunities
- Unlimited PTO
- Flexible schedule
- Paid holidays
- Comprehensive health, dental, and vision insurance
- A culture built on ownership, transparency, autonomy, and craftsmanship
- Real opportunities for architecture ownership and technical leadership
Company Overview