Remote Security Engineer - Cloud & App Security Lead

xbowcareers; United States; Remote; USD 140,000 - 210,000; Full time

Benefits offered by this job

Competitive salary

Equity or incentive plan

401k plan

Job summary

xbowcareers is seeking a hands-on security engineer to embed security across cloud, infrastructure, and internal platforms. You will own preventive controls, detection quality, and response readiness while partnering with engineering and platform teams to remediate production risk.

Role focuses on threat modeling, secure design, and secure DevSecOps workflows with tooling like SAST, SCA, and IaC scanning, in a remote-first, full-time setup spanning US, Canada, and Argentina.

Qualifications

• 5+ years of experience in security engineering, product security, cloud or platform security.
• Hands-on experience securing cloud environments (AWS, Azure, GCP).
• Product and application security experience including threat modeling and design reviews.
• Experience with security tooling at scale: SAST, SCA, secrets scanning, IaC scanning.
• Knowledge of Kubernetes & container security in production.

Responsibilities

• Design and implement security controls across cloud, infrastructure, and internal platforms.
• Harden cloud architecture, IAM, and infrastructure baselines in collaboration with engineering.
• Own product security reviews for new features and major changes.
• Drive threat modeling and secure design decisions early in SDLC.
• Operate and improve security workflows (SAST, SCA, secrets, IaC).
• Triage vulnerabilities and drive remediation under risk-based SLAs.
• Improve CNAPP coverage and incident response capabilities through automation.

Skills

Security engineering

Cloud security

Threat modeling

Kubernetes security

Incident response

Secure design reviews

Vulnerability triage

Tools

SAST

SCA

IaC scanning

Secrets scanning

Kubernetes tooling

Job description

xbowcareers is seeking a hands-on security engineer to embed security across cloud, infrastructure, and internal platforms. You will own preventive controls, detection quality, and response readiness while partnering with engineering and platform teams to remediate production risk.

Role focuses on threat modeling, secure design, and secure DevSecOps workflows with tooling like SAST, SCA, and IaC scanning, in a remote-first, full-time setup spanning US, Canada, and Argentina.