Accountabilities
In this role, you will own and advance security initiatives while remaining deeply involved in engineering execution. You will help establish secure development practices, strengthen infrastructure protection, and collaborate across teams to ensure security is built into every layer of the organization.
Define and execute the security strategy, roadmap, and initiatives to continuously improve overall security posture.
Act as a security subject matter expert, advising engineering, product, IT, and legal teams on best practices and risk management.
Lead application security efforts, including threat modeling, secure architecture reviews, code reviews, and secure software development lifecycle improvements.
Establish and improve secure coding standards, vulnerability management processes, and security engineering practices.
Implement and maintain security tooling such as SAST, DAST, SCA, vulnerability scanning, and related security automation solutions.
Build and maintain security tools, automation workflows, and infrastructure-as-code solutions to improve operational security.
Implement security controls across applications, APIs, and infrastructure environments.
Partner with engineers to improve authentication, authorization, encryption, and data protection capabilities.
Strengthen cloud security practices, including identity and access management, networking, secrets management, logging, and monitoring.
Integrate security controls into CI/CD pipelines and help create automated security checks throughout the development process.
Support compliance initiatives, including security frameworks, audits, policies, and regulatory requirements.
Help develop a security-focused culture by sharing knowledge, improving processes, and enabling teams to make better security decisions.
Requirements
The ideal candidate is an experienced software engineer who has developed strong security expertise and enjoys solving complex technical challenges through hands-on execution. You should be comfortable balancing strategic security direction with practical implementation.
7+ years of hands-on software engineering experience with a strong technical foundation.
Proven experience in application security, including threat modeling, secure code reviews, and integrating security into software development processes.
Experience securing cloud environments such as AWS, GCP, or Azure, including identity management, networking, and infrastructure security.
Ability to operate at both strategic and tactical levels by defining security direction while actively building and implementing solutions.
Strong understanding of secure software development practices, vulnerability management, and security architecture principles.
Experience implementing security tooling such as SAST, DAST, SCA, SIEM, or vulnerability management platforms.
Strong communication skills with the ability to translate technical security concepts into clear recommendations for different audiences.
Experience working collaboratively with engineering, product, legal, and operational teams.
Familiarity with compliance frameworks such as SOC 2 or ISO 27001.
Experience building security programs within startup, scale-up, or high-growth environments is preferred.
Relevant security certifications such as CISSP, CCSP, CSSLP, or OSCP are a plus.
Benefits
Competitive annual base salary range of $160,000 to $188,000.
Comprehensive medical, dental, orthodontic, and vision coverage.
401(k) matching program.
Flexible paid time off policy designed to support work-life balance.
Paid parental leave and volunteer days.
Mindfulness and wellness initiatives.
Monthly technology stipend and home office setup support.
Professional development stipend to support continued learning and growth.
Charitable donation matching program.
Remote-first work environment with flexibility and trust.
Opportunity to contribute to a meaningful mission while working with a collaborative engineering team.
How Jobgether works:
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
Why Apply Through Jobgether?
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
#LI-CL1