Information Security Engineer (Fully Remote)

Camunda; United States; Remote; USD 120,000 - 160,000; Full time

Benefits offered by this job

Home office budget

Co-working space support

Flexible time off

Health & wellbeing programs

Live Well Lifestyle Spending Account

Retirement and pension contributions

Life and disability insurance

Job summary

Camunda is seeking a security-focused engineer to join a fully remote, AI-enhanced team. You will triage vulnerabilities across SCA, container scans, and external reports, and coordinate fixes with engineering during releases.

The role includes threat modeling sessions and design reviews for new features and architecture changes. You will analyze code with AI-assisted tooling, validate findings, and reproduce issues while applying your own judgment.

Qualifications

• 3+ years in security or software engineering, with at least 2 years in application or product security.
• Experience at a SaaS or software product company working with engineering teams in modern CI/CD and cloud environments.
• Hands-on vulnerability triage with Snyk, Trivy, Semgrep, or CodeQL.
• Threat modeling and design reviews on real systems such as web apps, APIs, or distributed services.
• Proficiency in Java and ability to write scripts and build tools, with AI coding agents in daily work.

Responsibilities

• Vulnerability management: triage findings from SCA, container and code scanning, external reports and internal security testing; assess exposure; coordinate fixes or mitigations with engineering and release teams.
• Threat modeling and security reviews: run threat modeling sessions and design reviews with R&D teams for new features and architecture changes, turning results into prioritized actions.
• Code analysis with LLMs: utilize and improve LLM-assisted tooling to review code, validate findings, and reproduce issues while applying sound judgment.

Skills

Vulnerability triage

Threat modeling

Java

Scripting

AI coding agents

Cloud environments

Tools

Snyk

Trivy

Semgrep

CodeQL

Job description

• Vulnerability management: triage findings from SCA, container and code scanning, external reports and internal security testing; assess whether Camunda is actually affected; agree fix, mitigate, or accept with engineering and follow through to release.
• Threat modeling and security reviews: run threat modeling sessions and design reviews with R&D teams for new features and architecture changes, and turn results into concrete, prioritized actions.
• Code analysis with LLMs: use and improve LLM-assisted tooling to review code, validate findings, and reproduce issues while applying your own judgment.

Qualifications:

• Around 3+ years in security or software engineering, with at least 2 of them working on application or product security.
• Experience at a SaaS or software product company working closely with engineering teams in modern CI/CD and cloud environments.
• Hands-on vulnerability triage with tools like Snyk, Trivy, Semgrep, or CodeQL.
• Threat modeling and design review experience on real systems such as web apps, APIs, or distributed services.
• Proficiency in Java and ability to write scripts and build tools, with experience using AI coding agents in daily work.
• Remote and flexible work with home office budget, co-working space support, and flexible time off to recharge when you need it.
• Health and wellbeing: access locally tailored healthcare, Modern Health for global mental wellbeing, and a Live Well Lifestyle Spending Account.
• Financial security: retirement and pension plans with company contributions, plus life and disability insurance where relevant.
• Professional growth: up to $1,000 per year for self-driven learning including courses, certifications, and books.

Camunda

Camunda provides an enterprise platform for agentic orchestration, enabling organizations to coordinate AI agents, people, and systems across business processes. Trusted by over 700 organizations, including 9 of the top 10 US banks, Camunda is a fully remote, AI-first company named one of GP Bullhound's Top 100 Next Unicorns and a Great Place to Work.