Security Engineer — Cloud, AppSec & Vulnerability (Remote)

Socket.dev; Miami (FL); Hybrid; USD 90,000 - 140,000; Full time

Benefits offered by this job

Health Care Plan

Retirement Plan

Life Insurance

Flexible Paid Time Off

9 paid Holidays

Family Leave

Remote

Hybrid work (for Orlando Associates)

Free Food & Snacks (Orlando)

Wellness Resources

Job summary

Worth AI is hiring a hands-on Security Engineer to strengthen our vulnerability management program, harden our AWS environment, and embed application security into our software release process. You will own initiatives end to end, from scoping remediation to rolling out new controls, while handling day-to-day security tickets with defined SLAs.

You will work closely with engineering, IT, and compliance, requiring clear communication and thorough follow-through.

Qualifications

• 2–4 years in security engineering or related role.
• Hands-on AWS security services experience (IAM, VPC, GuardDuty, Security Hub, CloudTrail).
• Experience vulnerability management and remediation workflows.
• Familiar with SAST/DAST and dependency scanning.
• Strong written and verbal communication; cross-functional collaboration.
• Experience with Jira/Linear or similar ticketing tools.

Responsibilities

• Own vulnerability management program across endpoints, servers, and cloud.
• Harden AWS environments and implement guardrails.
• Support SAST/DAST and CI/CD security scans.
• Respond to security tickets within SLAs and drive remediation.
• Lead security initiatives and collaborate with engineering, IT, and compliance.

Skills

AWS security services

Python or Bash scripting

Ticketing/SLAs

Security incident response

Communication skills

Threat modelling / AppSec basics

Tools

Wiz

Tenable

Qualys

Snyk

Job description

Worth AI is hiring a hands-on Security Engineer to strengthen our vulnerability management program, harden our AWS environment, and embed application security into our software release process. You will own initiatives end to end, from scoping remediation to rolling out new controls, while handling day-to-day security tickets with defined SLAs.

You will work closely with engineering, IT, and compliance, requiring clear communication and thorough follow-through.