Security Engineer: Cloud & AppSec Vulnerability Mgmt Remote

Worth AI; Oregon; Hybrid; USD 110,000 - 140,000; Full time

Benefits offered by this job

Health Care Plan

Retirement Plan

Life Insurance

Flexible Paid Time Off

9 paid Holidays

Family Leave

Remote

Hybrid work (Orlando Associates)

Free Food & Snacks (Orlando)

Wellness Resources

Job summary

Worth AI is seeking a hands-on Security Engineer in the United States to strengthen vulnerability management, harden AWS environments, and embed security into software delivery. You will own end-to-end initiatives from scoping remediation efforts to rolling out controls, while handling day-to-day security tickets with defined SLAs.

You will collaborate with engineering, IT, and compliance to improve identity management, security tooling, and secure development practices across CI/CD.

Qualifications

• 2-4 years of experience in a security engineering, security analyst, or related role.
• Hands-on experience with AWS security services and concepts (IAM, VPC, GuardDuty, Security Hub, CloudTrail).
• Practical experience with vulnerability management tools and remediation workflows.
• Working knowledge of application security concepts (OWASP Top 10, SAST/DAST, dependency scanning).
• Experience managing a ticket queue against SLAs, with strong ownership and follow-through.
• Strong written and verbal communication skills; comfortable working cross-functionally.
• Solid analytical and troubleshooting skills, with the ability to prioritize under competing deadlines.

Responsibilities

• Own the vulnerability scanning program across endpoints, servers, and cloud infrastructure.
• Triage, prioritize, and track findings through remediation, partnering with engineering and IT owners.
• Monitor and report on remediation SLAs; escape aging or high-severity findings.
• Maintain vulnerability management documentation, metrics, and recurring reporting.
• Improve identity management configurations and automations to boost security and user experience.
• Monitor and harden AWS environments: IAM, security groups, S3, CloudTrail, GuardDuty, Security Hub, Config.

Skills

Security engineering

Vulnerability management

AWS security

Ticketing/SLAs

Communication

Analytical thinking

Tools

Wiz

Tenable

Qualys

Snyk

Job description

Worth AI is seeking a hands-on Security Engineer in the United States to strengthen vulnerability management, harden AWS environments, and embed security into software delivery. You will own end-to-end initiatives from scoping remediation efforts to rolling out controls, while handling day-to-day security tickets with defined SLAs.

You will collaborate with engineering, IT, and compliance to improve identity management, security tooling, and secure development practices across CI/CD.