Security Engineer

Zeely Inc.; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Remote-first setup

Offices in Warsaw and Kyiv

Regular performance reviews

Job summary

Zeely is seeking a Security Engineer to identify and fix vulnerabilities across our product and cloud infrastructure, respond to incidents in real time, and close security tickets end to end.

This hands-on role collaborates with Engineering, DevOps, and Platform teams, helping strengthen security as Zeely scales and hardens our AWS environment while supporting SOC 2 and CASA compliance efforts.

Qualifications

• 5+ years engineering experience with ability to work independently.
• 2+ years hands-on security experience in a security/DevOps or platform role.
• Backend development in Node.js/JavaScript/TypeScript, Java, C#/ .NET, Go or Rust.

Responsibilities

• Identify, prioritize, and fix vulnerabilities across product and cloud infrastructure.
• Respond to security incidents and defend against attacks in real time.
• Close security tickets end to end, from investigation to fix in code or infrastructure.
• Integrate security checks and tooling into SDLC / CI/CD workflows.
• Review code and infrastructure changes from a security perspective.
• Help implement security controls and gather evidence for SOC 2, CASA compliance.
• Collaborate with DevOps and Platform on access management, secrets, and AWS hardening.

Skills

Engineering experience

Security experience

Backend development (Node.js/JS/TS)

DevOps / Cloud (AWS)

Vulnerability remediation (OWASP Top 5

Security incidents handling

English (B2+)

Ukrainian language

Job description

Join Zeely as a Security Engineer and help us protect our products, infrastructure, and data as we scale.

This is a hands-on role: you'll find and fix vulnerabilities, close security tickets yourself, and help us defend against attacks. You'll work closely with Secutity Officer, engineering, DevOps, and Platform teams and help strengthen our security function as we grow.

About Us:

Zeely is the agentic AI platform for creating, launching, and scaling paid ads.

Simply put: we've made the best AI solutions and marketing tools available to small and medium businesses — tools that used to be reserved for big brands with expensive marketing teams.

The next big step: a B2B solution for large marketing teams and enterprise clients — workflows, creative analytics, and full control over campaigns across the whole team. For companies where performance marketing already runs at scale and needs more efficiency and automation.

A few numbers that speak for themselves:

• 4 years on the market — a stable, profitable company backed by international investors;

• 6× growth over the past year;

• 2,000,000+ businesses already use Zeely;

• #1 in its category in the US market;

• 200+ specialists on the team;

• Markets: US + worldwide.

What You'll Do:

• Identify, prioritize, and fix vulnerabilities across our product and cloud infrastructure;

• Respond to security incidents and help defend against attacks in real time;

• Close security tickets end to end, from investigation to fix in code or infrastructure;

• Integrate security checks and tooling into our development pipeline (SDLC / CI/CD);

• Review code and infrastructure changes from a security perspective;

• Help implement security controls and gather evidence for compliance (SOC 2, CASA);

• Work with the DevOps and Platform teams on access management, secrets, and hardening of our AWS environment.

What Do You Need to Join Us?

• 5+ years of engineering experience, with the ability to work fully independently;

• 2+ years of hands-on experience in security (Security Engineer, or a combined Security/DevOps or Platform role);

• Backend development background in at least one of: Node.js / JavaScript / TypeScript, Java, C#/.NET, Go, or Rust;

• Strong practical experience with DevOps and cloud infrastructure (AWS);

• Hands-on experience finding and fixing vulnerabilities (OWASP Top 10, cloud misconfigurations, dependency issues);

• Experience handling security incidents;

• Upper-Intermediate (B2+) English or higher;

• Fluent Ukrainian.

Nice to Have:

• A career path from backend to DevOps/Platform to Security;

• Security certifications (AWS Security Specialty or similar);

• Experience preparing for SOC 2, ISO 27001, or CASA audits;

• Understanding of GDPR and/or CCPA (CPRA) requirements.

Why It's Worth Joining Us:

• A hands-on security role with real impact in a stable, profitable product company;

• Work with cutting-edge technologies and contribute to building AI-powered tools;

• A strong team of A-level players who push each other to grow;

• A remote-first setup with offices in Warsaw and Kyiv;

• Regular performance reviews to keep your growth transparent and rewarded.

Recruitment Process:

Intro Call → Technical Interview → Test Task → Final Interview → Reference Check → Offer.