Security Engineer

Reinforced Learning; Town of Tonawanda (NY); On-site; USD 140,000 - 200,000; Full time

Job summary

Reinforced Learning is seeking a security engineer to build and maintain access, secrets, and isolation controls across the company. You will design and review sandbox isolation for customer data, and drive detection, response, and continuous improvement of security practices.

You will write code to automate security tasks, participate in vendor and customer security reviews, and integrate security checks into engineering workflows without slowing development.

Qualifications

• Three or more years in security engineering with hands-on cloud and application work.
• You write code to solve security problems rather than only configuring tools.
• Compliance frameworks customers ask about, such as SOC 2.
• Clear communication with engineers and with customers’ security teams.

Responsibilities

• Own identity, access and secrets management across the company.
• Define and review the isolation model for sandboxes and customer data.
• Handle detection and response for critical events.
• Lead vendor and customer security reviews with up-to-date evidence.
• Embed security checks into engineering workflows without slowing them down.

Skills

Security engineering experience

Code to solve security problems

SOC 2/compliance awareness

Clear communication with engineers and

Job description

The role

We hold customer specifications, expert identities and unreleased evaluation data. You’ll build the controls that protect them: access, secrets, environment isolation, monitoring, and the processes customers audit before they work with us.

What you’ll own

• Identity, access and secrets management across the company.
• The isolation model for sandboxes and customer data, designed and reviewed.
• Detection and response for the events that matter, with the rest tuned out.
• Vendor and customer security reviews, with our evidence kept current.
• Security checks embedded in engineering workflows without slowing them down.

What you bring

• Three or more years in security engineering with hands-on cloud and application work.
• You write code to solve security problems rather than only configuring tools.
• Compliance frameworks customers ask about, such as SOC 2.
• Clear communication with engineers and with customers’ security teams.

Helpful, not required

• Securing multi-tenant compute or ML systems.
• An offensive security background.