Cloud Security Engineer

airSlate Inc.; United States; Remote; USD 150,000 - 210,000; Full time

Benefits offered by this job

Remote & hybrid work

Stock options

Learning & development

Health coverage

Mental health days

Family-friendly culture

Charitable initiatives

Job summary

airSlate Inc. is seeking a Senior Security Engineer (Cloud & AppSec) to join its Security Engineering team to safeguard our AWS and GCP environments and help build secure products.

You will run threat modeling, implement secure SDLC practices, support audits like SOC 2, and work with product and engineering teams to detect and fix risks early. This role offers remote/hybrid options, competitive compensation, stock options, and a focus on professional growth.

Qualifications

• 4+ years of professional experience in information security, application security, or a related field.
• Hands-on experience securing AWS and/or GCP.
• Practical experience with SAST, DAST, and SCA tools integrated into CI/CD.
• Experience in security testing of web, mobile, or network applications.
• Experience in incident response and post-mortems.
• Solid knowledge of secure development practices across the SDLC, including threat modeling.
• Working knowledge of Bash, Python, Go, or Terraform.
• Strong written and spoken English (B2+).

Responsibilities

• Secure AWS and GCP environments, including IAM, network segmentation, encryption, and key management.
• Identify and remediate cloud misconfigurations and security risks before problems arise.
• Set up security logging, monitoring, and investigate anomalies.
• Test security of web, mobile, and network applications.
• Operate and improve SAST/DAST/SCA tools within CI/CD pipelines.
• Participate in architecture reviews, threat modeling, and risk assessments.
• Communicate security findings clearly and drive fixes with engineering teams.
• Respond to security incidents with triage, containment, and post-mortems.
• Support SOC 2 and other audits with cross-functional teams.

Skills

Clear communication

English (B2+)

Threat modeling

Secure SDLC practices

Incident response

Tools

AWS

GCP

SAST

DAST

SCA

CI/CD tooling

Bash

Python

Go

Terraform

Job description

About airSlate

airSlate is a global SaaS technology company that develops no-code workflow automation, electronic signature, and document management solutions. Our award-winning products -SignNow, pdfFiller, DocHub, altaFlow, Instapage,and US Legal Forms- serve over hundreds of millions of users and more than one million customers worldwide, helping organizations of every size digitize processes, improve efficiency, and transform how they work.

About Cloud and Security team:

Our security team protects user data and keeps the airSlate platform stable. We work closely with product, engineering, and operations teams to reduce security risks at every stage, from design to production. We also monitor threats, run system audits, and help everyone in the company follow secure work practices.

And now, we are looking for a Senior Security Engineer (Cloud & AppSec) who is prepared to contribute to the next chapter of our company's growth.

The person will join our Security Engineering team of five and take on the responsibility of keeping our cloud infrastructure and products secure. As Senior Security Engineer, you will help product and engineering teams build secure products, find and fix risks early, and respond quickly when something goes wrong.

What you'll be working on:

• Secure our AWS and GCP environments: access management (IAM, least privilege, workload identities), network segmentation, encryption, and key and secrets management
• Find and fix cloud misconfigurations and security risks before they cause problems
• Set up security logging and monitoring, and investigate suspicious activity
• Test the security of our web, mobile, and network-based applications
• Run and improve our security scanning tools (SAST, DAST, SCA) and connect them to CI/CD pipelines
• Help teams build secure products from the start by joining architecture reviews, threat modeling sessions, and risk assessments
• Explain security findings clearly and work with engineers until the issues are fixed
• Handle security incidents of different kinds (application, infrastructure, user-related): investigate, triage, contain, and write post-mortems
• Prepare for SOC 2 and CASA audits and external assessments together with product and compliance teams
• Configure and monitor our CDN
• Work alongside a small, experienced, and proactive team that solves complex problems together

What we expect from you:

• 4+ years of professional experience in information security, application security, or a related field
• Hands-on experience securing AWS and/or GCP
• Practical experience with SAST, DAST, and SCA tools, including choosing, setting up, and integrating them into CI/CD
• Experience in security testing of web, mobile, or network applications
• Experience in incident response, from investigation to post-mortem
• Good knowledge of secure development practices across the SDLC, including threat modeling
• Working knowledge of Bash, Python, Go, or Terraform
• Clear communication skills and the ability to explain risks so that teams act on them
• English at B2 level or higher, written and spoken

What helps you rock:

• Experience preparing for compliance audits such as SOC 2, CASA, PCI DSS, or NIST CSF
• Previous experience as a DevOps engineer or developer

What we offer

• Flexible working environment- Our teams operate across the globe. We value in‑person collaboration in our hubs, but we also embrace remote and hybrid working. You can work from one of our offices in the United States, Poland, Romania or Ukraine, or remotely from many countries.
• Competitive compensation and stock options- We offer salaries that reflect local market conditions and experience, plus a performance-based bonus system and stock options so you share in the company’s growth.
• Professional growth and learning- We invest in your development through courses, conferences, and access to learning resources. We encourage career growth and internal mobility, supporting teammates who want to explore new opportunities within airSlate.
• Health and well‑being- We provide comprehensive benefits tailored to each country, including health coverage, wellness programmes and access to fitness options. We also dedicate quarterly company-wide Mental Health Days, when everyone takes time off to rest and recharge.
• Family‑friendly culture- Family life is part of who we are, and we embrace it in many forms. From flexibility for parents to our airSlate Junior Club for kids, to company-wide family days and our pet-friendly approach, we’re committed to making work and life easier to balance.
• Giving back- We support charitable initiatives around the world through the airSlate Care programme. Our current focus includes humanitarian aid in Ukraine and other regions, matching employee donations and supporting causes chosen by our teams.
• Open communication- We encourage transparent dialogue at all levels. From team discussions to company-wide Q&A sessions with our CEO, we make sure everyone has the chance to be heard and to influence how we grow.

It is airSlate's policy to comply with all applicable equal employment opportunity laws by making all employment decisions without unlawful regard or consideration of any individual’s race, religion, ethnicity, color, sex, sexual orientation, gender identity or expressions, transgender status, sexual and other reproductive health decisions, marital status, age, national origin, genetic information, ancestry, citizenship, physical or mental disability, veteran or family status or any other basis protected by applicable national, federal, state, provincial or local law. airSlate's policy prohibits unlawful discrimination based on any of these impermissible bases, as well as any bases or grounds protected by applicable law in each jurisdiction. If you need assistance or an accommodation during the application process because of a disability, it is available upon request. airSlate is pleased to provide such assistance and no applicant will be penalized as a result of such a request. Pursuant to relevant law, where applicable, airSlate will consider for employment qualified applicants with arrest and conviction records.

Read our Recruitment Privacy Notice to Learn how we process your personal information.