Security Engineer

xbowcareers; United States; Remote; USD 140,000 - 210,000; Full time

Benefits offered by this job

Competitive salary

Equity or incentive plan

401k plan

Job summary

xbowcareers is seeking a hands-on security engineer to embed security across cloud, infrastructure, and internal platforms. You will own preventive controls, detection quality, and response readiness while partnering with engineering and platform teams to remediate production risk.

Role focuses on threat modeling, secure design, and secure DevSecOps workflows with tooling like SAST, SCA, and IaC scanning, in a remote-first, full-time setup spanning US, Canada, and Argentina.

Qualifications

• 5+ years of experience in security engineering, product security, cloud or platform security.
• Hands-on experience securing cloud environments (AWS, Azure, GCP).
• Product and application security experience including threat modeling and design reviews.
• Experience with security tooling at scale: SAST, SCA, secrets scanning, IaC scanning.
• Knowledge of Kubernetes & container security in production.

Responsibilities

• Design and implement security controls across cloud, infrastructure, and internal platforms.
• Harden cloud architecture, IAM, and infrastructure baselines in collaboration with engineering.
• Own product security reviews for new features and major changes.
• Drive threat modeling and secure design decisions early in SDLC.
• Operate and improve security workflows (SAST, SCA, secrets, IaC).
• Triage vulnerabilities and drive remediation under risk-based SLAs.
• Improve CNAPP coverage and incident response capabilities through automation.

Skills

Security engineering

Cloud security

Threat modeling

Kubernetes security

Incident response

Secure design reviews

Vulnerability triage

Tools

SAST

SCA

IaC scanning

Secrets scanning

Kubernetes tooling

Job description

Role overview

A hands-on security engineer is needed to embed security into how a fast-moving, AI-driven organization designs, ships, and operates systems across cloud, infrastructure, and internal platforms. This is a technical individual contributor role with end-to-end ownership of preventive controls, detection quality, and response readiness, partnering closely with engineering and platform teams to remediate real production risk.

Responsibilities

• Design and implement security controls across cloud, infrastructure, and internal platforms.
• Partner with engineering to harden cloud architecture, identity and access management, and infrastructure baselines.
• Own product security reviews for new features, services, and major architecture changes.
• Drive threat modeling and secure design decisions early in the software development lifecycle.
• Operate and improve application security workflows, including static analysis, software composition analysis, secrets scanning, and infrastructure-as-code scanning.
• Triage vulnerabilities across application, container, and cloud findings, and drive remediation under risk-based SLAs.
• Improve CNAPP coverage, Kubernetes and container security posture, and the organization's incident response capability through automation.

Requirements

• 5+ years of experience in security engineering, product security, cloud or platform security, or closely related roles.
• Strong hands-on experience securing cloud environments, including AWS, Azure, and GCP.
• Hands-on product and application security experience, including secure design reviews, threat modeling, and code-level risk discussions.
• Experience operating application security tooling and processes at scale, including SAST, SCA, secrets scanning, and IaC scanning.
• Working knowledge of Kubernetes and container security in production systems.
• Experience with vulnerability triage, risk-based prioritization, incident response, and post-incident hardening in cloud-native environments.

Nice to have

• Multi-cloud experience beyond AWS, such as Azure, GCP, or OCI.
• Offensive security or pentesting background with the ability to convert findings into durable engineering fixes.
• Experience scaling security at a startup from early stage through audit-ready maturity.
• Relevant security certifications such as OSCP, OSCE, AWS Security Specialty, or Kubernetes security credentials.

Benefits and work setup

• Competitive salary, meaningful equity, comprehensive benefits, and a 401k plan.
• Remote-first role with regular in-person collaboration opportunities; locations include US, Canada, and Argentina.
• Full-time contract with structured hiring process and timezone coverage expectations.