Senior Security Operations Engineer

• Conduct threat modeling and security design reviews for new features, services, and architectural changes.
• Perform secure code reviews and provide feedback focusing on authentication, authorization, input handling, secrets management, and data protection.
• Deploy and maintain security tooling across the development lifecycle including SAST, SCA, DAST, secret scanning, IaC scanning, and CI/CD security guardrails.
• Support infrastructure and environment security, including AWS resource hardening and Terraform-managed infrastructure reviews.
• Contribute to incident response for security events.
• Drive vulnerability triage and prioritization across teams and report metrics.
• Partner with sales and legal on customer and vendor questionnaires, RFP security sections, and trust-and-safety inquiries.
• Support SOC 2, ISO 27001, PCI 4.0, and other compliance audit cycles.
• Monitor and respond to alerts from endpoint, cloud, and application security tools.
• Execute recurring user access reviews and IAM hygiene tasks.

• 5+ years of experience in security engineering, security operations, or a related role.
• Hands-on experience with SOC 2, ISO 27001, or PCI compliance audit cycles.
• Strong application security fundamentals: threat modeling, secure code review, and familiarity with common vulnerability classes.
• Experience with security tooling across the development lifecycle.
• Working knowledge of AWS infrastructure and services including IAM, VPC networking, and security configurations.
• Familiarity with infrastructure-as-code (Terraform preferred) and CI/CD pipeline security.
• Proficiency in Python and comfort reading code across backend services.
• Strong written communication skills.
• Comfort using AI-assisted development tools.

Pay range: $180K - $220K

• Competitive equity grants
• 100% employer-paid benefits
• Fully remote flexibility
• 401k match up to 4%