Security Engineer

Arionkoder; United States; Remote; USD 120,000 - 190,000; Full time

Job summary

Arionkoder is seeking a Sr Security Engineer to own the vulnerability management lifecycle in a hands-on, cloud-native AWS environment. You will lead discovery, risk assessment, prioritization, and remediation coordination with DevSecOps and engineering teams.

The ideal candidate has deep experience in securing AWS workloads at scale, SIEM tuning in production, and strong scripting skills (Python, Bash, PowerShell) to automate security operations. English proficiency is required for this role.

Qualifications

• Experience in security engineering, system administration, or related roles.
• Hands-on, production-level AWS security experience in a 100% cloud-native environment.
• End-to-end ownership of the vulnerability management lifecycle: discovery, prioritization, risk and criticality assessment, timeline assignment, progress tracking, and closure driving (excluding code fixes, which you coordinate with development teams).
• Demonstrated experience owning security incident investigations
• Proven experience owning and fine-tuning a SIEM solution in production, with the judgment to separate real security signals from noise and false positives.
• Strong scripting skills in Python, Bash, or PowerShell for automation and tooling.
• Solid understanding of network security concepts (firewalls, IDS/IPS, proxies, VPNs).
• Hands-on experience with endpoint security tools and monitoring solutions.
• Strong analytical and problem-solving skills with the ability to think like an attacker.
• Nice-to-Haves: Experience securing containerized workloads (Docker, Kubernetes); knowledge of compliance frameworks (PCI-DSS, SOC 2, NIST, ISO 27001); and experience with Infrastructure as Code (Terraform, CloudFormation).

Responsibilities

• Own end-to-end vulnerability management lifecycle: discovery, prioritization, risk and criticality assessment, timeline assignment, progress tracking, and closure driving (excluding code fixes, which you coordinate with development teams).
• Lead security incident investigations and remediation coordination with teams.
• Tune and manage SIEM in production to reduce noise and false positives.
• Automate security operations with scripts and tooling.
• Secure cloud workloads at scale in a 100% AWS environment.
• Implement and review network security controls (firewalls, IDS/IPS, proxies, VPNs).
• Collaborate with DevSecOps and engineering teams to improve security posture.

Skills

Security engineering

AWS security (cloud-native)

Vulnerability management

SIEM tuning

Threat modeling

Scripting (Python, Bash, PowerShell)

Incident investigations

Networking security

Endpoint security tools

Attacker mindset

Tools

SIEM

Terraform

CloudFormation

Docker

Kubernetes

AWS CloudWatch

Job description

Arionkoder is an AI consulting firm helping companies build, embed, and own AI systems that drive real business outcomes. We combine Product Development, Artificial Intelligence, and Team Augmentation to craft digital products and solutions that create lasting impact — guided by a human-centric approach and a commitment to pushing the boundaries of what technology can do.

Sr Security Engineer

We're looking for a hands-on Security Engineer who can take full ownership of the vulnerability management lifecycle—from discovery and risk assessment through remediation tracking and verification. You'll be the driving force behind reducing security risk across a cloud-native AWS environment, partnering closely with DevSecOps and engineering teams. The ideal candidate has experience owning and tuning SIEM platforms, distinguishing real threats from noise, and leveraging scripting to automate security operations and integrate security tooling.

Required Qualifications:

- Experience in security engineering, system administration, or related roles.

- Hands-on, production-level AWS security experience (100% cloud-native environment), not just familiarity, but deep, applied knowledge in securing AWS workloads at scale.

-End-to-end ownership of the vulnerability management lifecycle: discovery, prioritization, risk and criticality assessment, timeline assignment, progress tracking, and closure driving (excluding code fixes, which you coordinate with development teams).

- Demonstrated experience owning security incident investigations

- Proven experience owning and fine-tuning a SIEM solution in production, with the judgment to separate real security signals from noise and false positives.

- Strong scripting skills in Python, Bash, or PowerShell for automation and tooling.

- Solid understanding of network security concepts (firewalls, IDS/IPS, proxies, VPNs).

- Hands-on experience with endpoint security tools and monitoring solutions.

- Strong analytical and problem-solving skills with the ability to think like an attacker.

Nice-to-Haves: Experience securing containerized workloads (Docker, Kubernetes); knowledge of compliance frameworks (PCI-DSS, SOC 2, NIST, ISO 27001); and experience with Infrastructure as Code (Terraform, CloudFormation).

Work Schedule: 8:00 AM–5:00 PM CDT/CST
The role also includes on-call responsibilities, which rotate among the team members.

Please note that the role is 100% in English on a daily basis.

Monthly USD Service Fee
20 business days of paid Agreed Time Off—Annual + 6 Local Holidays
Caregiver Time Off
A dynamic remote work culture. You can work from anywhere!
An entrepreneurial environment.

About us

In 2010, our founders dreamed up a company that could positively impact the world. Since then, we've been in permanent evolution: from business consulting to innovation and design, and now to building amazing digital products powered by AI. We scaled globally, launched AI Labs and Reshape Studios, and claimed our space as an AI consulting firm — helping organizations move from pilots to production through accountable AI. Today, we're expanding our impact across industries, driving real AI adoption through accountability, governance, and value at scale. Dreamers first, builders always.