Lead App Security Engineer — Remote & Cloud Guardrails

Everyday Electric; Oregon; Hybrid; USD 170,000 - 220,000; Full time

Benefits offered by this job

Remote work environment with home‑offi

PTO with no preset vacation limits

Health and wellness benefits

401(k) plan with employer matching

Professional growth and mission‑driven

Job summary

Everyday Electric is seeking a senior security leader to shape and drive our security program across applications, cloud, and AI systems. You will define strategy, review architecture, and mentor engineers to build secure-by-default patterns and guardrails.

You will lead scalable controls across AWS, CI/CD, and cloud infrastructure while coordinating with Legal, IT, and product teams to manage risk and compliance.

Qualifications

• 7+ years of experience in application, product, cloud, or infrastructure security, with strong hands-on security engineering experience.
• Strong software engineering skills with the ability to read, write, and review production code and design practical security improvements.
• Deep understanding of application and API security, authentication and authorization, cloud security, and modern software development and delivery.
• Experience designing scalable security architecture and secure-by-default controls across applications and cloud infrastructure.
• Understanding of AI and agentic security risks, including prompt injection, insecure tool use, excessive permissions, sensitive-data leakage, and risks associated with MCP and third-party AI integrations.
• Proficiency in utilizing AWS security services (e.g. IAM, WAF, GuardDuty, AWS Inspector) and static and dynamic application security tools like CodeQL, Burp Suite, Zap, Nuclei.
• Strong understanding of networking, security, and core Internet protocols (e.g. TCP/IP, DNS, SMTP, SSL, distributed networks).
• Demonstrated ability to lead complex security initiatives across multiple teams, influence technical direction, and operate independently in ambiguous problem spaces.
• Strong communication skills and the ability to translate security risks into practical engineering decisions.
• Experience with AWS security services, application security tooling, SOC 2/ISO 27001, and AI-assisted security tools is a plus.

Responsibilities

• Security strategy and leadership: Help define and drive company-wide security strategy across applications, cloud infrastructure, and AI systems.
• Application and product security: Lead security architecture reviews, threat modeling, code reviews, and security testing.
• AI and agentic security: Define and implement security guardrails for LLM-powered applications, AI agents, coding assistants, and MCP/tool integrations.
• Cloud and infrastructure security: Improve security across AWS/GCP, containers, CI/CD, identity and access management, and the software supply chain.
• Vulnerability management and incident response: Improve discovery, prioritization, remediation, and detection of security issues.
• Company-wide security: Partner with Engineering, Infrastructure, IT, Legal, and other teams on security architecture, policies, and compliance.
• Security culture: Raise security capabilities through tooling, training, and mentorship.

Skills

Security leadership

Hands-on security

Cloud security

Application security

AI security awareness

Security architecture

Threat modeling

Security tooling

Networking fundamentals

Cross-team leadership

Tools

CodeQL

Burp Suite

ZAP

Nuclei

AWS security services

Job description

Everyday Electric is seeking a senior security leader to shape and drive our security program across applications, cloud, and AI systems. You will define strategy, review architecture, and mentor engineers to build secure-by-default patterns and guardrails.

You will lead scalable controls across AWS, CI/CD, and cloud infrastructure while coordinating with Legal, IT, and product teams to manage risk and compliance.