Security Engineer

zeely; United States; Remote; USD 140,000 - 210,000; Full time

Job summary

Zeely seeks a Security Engineer to protect products, infrastructure, and data as we scale. This hands-on role involves finding and fixing vulnerabilities, closing security tickets, and defending against real-time attacks across product and cloud teams.

You will integrate security checks into the SDLC/CI/CD, review code for security, and help implement controls for SOC 2 and CASA while strengthening AWS security.

Qualifications

• 5+ years of engineering experience with at least 2+ years in security.
• Backend development in Node.js/TypeScript, Java, or C#/.NET.
• Strong AWS and cloud security experience with incident handling.
• Hands-on vulnerability research and remediation across product and cloud.

Responsibilities

• Identify, prioritize, and fix vulnerabilities across product and cloud infrastructure.
• Respond to security incidents and defend against real-time attacks.
• Close security tickets end to end from investigation to fix in code or infra.
• Integrate security checks and tooling into the SDLC/CI-CD pipelines.
• Review code and infrastructure changes from a security perspective; strengthen AWS security.

Skills

Node.js / JavaScript / TypeScript

Java

C# / .NET

Go

Rust

AWS

Security incident response

OWASP Top 10

Job description

Join Zeely as a Security Engineer and help us protect our products, infrastructure, and data as we scale. This is a hands‑on role: you\'ll find and fix vulnerabilities, close security tickets yourself, and help us defend against attacks. You\'ll work closely with Secutity Officer, engineering, DevOps, and Platform teams and help strengthen our security function as we grow.

About Us:

Zeely is the agentic AI platform for creating, launching, and scaling paid ads.

Simply put: we\'ve made the best AI solutions and marketing tools available to small and medium businesses - tools that used to be reserved for big brands with expensive marketing teams.

The next big step: a B2B solution for large marketing teams and enterprise clients - workflows, creative analytics, and full control over campaigns across the whole team. For companies where performance marketing already runs at scale and needs more efficiency and automation.

A few numbers that speak for themselves:

• 4 years on the market - a stable, profitable company backed by international investors;
• 6× growth over the past year;
• 2,000,000+ businesses already use Zeely;
• #1 in its category in the US market;
• 200+ specialists on the team;
• Markets: US + worldwide.

What You\'ll Do:

• Identify, prioritize, and fix vulnerabilities across our product and cloud infrastructure;
• Respond to security incidents and help defend against attacks in real time;
• Close security tickets end to end, from investigation to fix in code or infrastructure;
• Integrate security checks and tooling into our development pipeline (SDLC / CI/CD);
• Review code and infrastructure changes from a security perspective;
• Help implement security controls and gather evidence for compliance (SOC 2, CASA);
• Work with the DevOps and Platform teams on access management, secrets, and hardening of our AWS environment.

What Do You Need to Join Us?

• 5+ years of engineering experience, with the ability to work fully independently;
• 2+ years of hands‑on experience in security (Security Engineer, or a combined Security/DevOps or Platform role);
• Backend development background in at least one of: Node.js / JavaScript / TypeScript, Java, C#/.NET, Go, or Rust;
• Strong practical experience with DevOps and cloud infrastructure (AWS);
• Hands‑on experience finding and fixing vulnerabilities (OWASP Top 10, cloud misconfigurations, dependency issues);
• Experience handling security incidents;
• Upper-Intermediate (B2+) English or higher;
• Fluent Ukrainian.

Nice to Have:

• A career path from backend to DevOps/Platform to Security;
• Security certifications (AWS Security Specialty or similar);
• Experience preparing for SOC 2, ISO 27001, or CASA audits;
• Understanding of GDPR and/or CCPA (CPRA) requirements.

Why It\'s Worth Joining Us:

• A hands‑on security role with real impact in a stable, profitable product company;
• Work with cutting‑edge technologies and contribute to building AI‑powered tools;
• A strong team of A-level players who push each other to grow;
• A remote‑first setup with offices in Warsaw and Kyiv;
• Regular performance reviews to keep your growth transparent and rewarded.

Recruitment Process:

Intro Call → Technical Interview → Test Task → Final Interview → Reference Check → Offer.