Remote Security Engineer: Cloud, AppSec & Vulnerability

Worth AI; Atlanta (GA); On-site; USD 110,000 - 170,000; Full time

Benefits offered by this job

Health Care Plan

Retirement Plan

Life Insurance

Flexible PTO

9 paid Holidays

Family Leave

Remote

Hybrid for Orlando Associates

Free Food & Snacks

Wellness Resources

Job summary

Worth AI is seeking a hands-on Security Engineer to strengthen our vulnerability management program, harden our AWS environment, and help build application security into how we ship software.

This role is project-driven: you’ll own initiatives end to end, from scoping a remediation effort to rolling out a new control, while also handling day-to-day security tickets against defined SLAs. You’ll collaborate with engineering, IT, and compliance to embed security into everyday workflows.

Qualifications

• 2–4 years of experience in a security engineering, security analyst, or related role.
• Hands-on experience with AWS security services and concepts (IAM, VPC, GuardDuty, Security Hub, CloudTrail).
• Practical experience with vulnerability management tools and remediation workflows.
• Working knowledge of application security concepts (OWASP Top 10, SAST/DAST, dependency scanning).
• Experience managing a ticket queue against SLAs, with strong ownership and follow-through.
• Strong written and verbal communication skills; comfortable working cross-functionally.
• Solid analytical and troubleshooting skills, with the ability to prioritize under competing deadlines.

Responsibilities

• Vulnerability Management (Primary Focus): Own the vulnerability scanning program across endpoints, servers, and cloud infrastructure; triage, prioritize, and track findings through remediation; maintain documentation and metrics.
• Cloud Security (AWS): Monitor and harden AWS environments; implement guardrails and baseline configurations; investigate security alerts.
• Application Security: Support SAST/DAST and CI/CD integration; review findings and triage remediation; participate in secure code reviews.
• Security Operations & Ticketing: Triage and resolve security tickets within SLAs; document decisions and remediation status; lead cross-functional security initiatives.
• Project & Cross-Functional Work: Lead or contribute to tooling rollouts, control implementations, audits and compliance prep; communicate risk to stakeholders.

Skills

Vulnerability management

AWS security

AppSec concepts

Incident response

Ticketing SLA

Communication

Threat modeling

Automation scripting

Tools

Wiz

Tenable

Qualys

Snyk

Job description

Worth AI is seeking a hands-on Security Engineer to strengthen our vulnerability management program, harden our AWS environment, and help build application security into how we ship software.

This role is project-driven: you’ll own initiatives end to end, from scoping a remediation effort to rolling out a new control, while also handling day-to-day security tickets against defined SLAs. You’ll collaborate with engineering, IT, and compliance to embed security into everyday workflows.