This is a Fully Remote Job
About Our Client:
The organization operates in the cloud delivery and security platform industry, focusing on automating security, compliance, and reliability for engineering teams managing sensitive data in highly regulated environments. Since 2014, it has addressed challenges in deploying, observing, securing, and scaling applications amid evolving complexity from AI-assisted development. Recently integrated with a cloud solutions provider, the program now has expanded resources to enhance its platform for engineering teams relying on secure cloud infrastructure.
About the Opportunity:
The SENIOR SECURITY ENGINEER role is a hands-on position responsible for defending and hardening a cloud platform used by regulated companies. This position involves designing secure infrastructure, managing vulnerability and penetration testing programs, leading incident response, and coordinating compliance recertifications. The role collaborates closely with the engineering team, embedding security practices directly into development and operations to maintain and improve platform security and reliability.
Responsibilities:
Design and build security-by-default infrastructure across an AWS-based platform with multiple technology stacks
Manage the vulnerability management program, including triaging and prioritizing findings
Oversee penetration testing efforts, from automated assessments to remediation coordination
Lead incident response activities, focusing on detection, containment, and root cause resolution
Develop and maintain detection tools, alerting systems, and runbooks
Participate in security incident on-call rotations and follow-up processes
Coordinate compliance recertification efforts including evidence collection and auditor interaction
Utilize AI tools to enhance development and investigation workflows
Requirements:
Minimum 5 years of security engineering experience with production security-critical systems
Proficient hands-on security engineer with coding and infrastructure operation skills
Strong communication skills, both written and verbal, especially during incidents
Experience with developer tools or platform engineering is advantageous
Proficient in full-stack development with languages such as Ruby on Rails, React/TypeScript, and Go
Extensive experience with cloud infrastructure security, preferably AWS and related native security tools
Practical penetration testing experience, including using automated or AI-assisted tools
Experience managing vulnerability management programs through remediation
Incident response leadership experience, able to work calmly under pressure
Knowledge of identity management, network security, and detection tooling
Organizational skills to manage compliance recertifications efficiently
Pay Range and Compensation Package:
The pay range and compensation package for this role will be determined based on the candidate's experience, skills, and other relevant factors.
Equal Opportunity Statement:
Our client is an equal opportunity employer. They celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, or national origin.
Note:
TalentHop is a recruitment partner of this role. Please note that all employment decisions, including candidate assessment, interviews, hiring, compensation, and employment terms, are made exclusively by the hiring employer.