Security Engineer (Fully Remote)

Drivetrain; Stati Uniti; Remoto; USD 120.000 - 160.000; Tempo pieno

Descrizione del lavoro

Drivetrain is a financial planning and decision-making platform that helps companies scale and achieve targets predictably. Founded in 2021 by ex-Googlers, it is a remote-first, fast-growing startup backed by leading venture capital firms with a culture focused on autonomy, transparency, and customer-centricity.

As a Security Engineer you will own the security posture across product, cloud infrastructure, and internal systems, partnering with Engineering, DevOps and Compliance to bake security

Competenze

• 4-7 years of hands-on experience in security engineering, cloud security, or application security at a B2B SaaS company.
• Strong knowledge of AWS security services and Infrastructure as Code (Terraform or similar).
• Comfort writing code (Python, Go) to automate security tasks and experience supporting SOC 2 or ISO 27001 audits.

Mansioni

• Own Drivetrain's security posture across product, cloud infrastructure, and internal systems.
• Work closely with Engineering, DevOps, and Compliance to build security into the shipping process.
• Protect data that finance leaders at enterprise companies rely on.
• Secure cloud infrastructure (AWS) including IAM, network security, secrets management, and logging.
• Embed security into the SDLC through threat modeling, secure code reviews, and automated scanning in CI/CD.
• Lead vulnerability management, detection and incident response, and compliance programs like SOC 2 Type II and ISO 27001.

Conoscenze

Security engineering

Cloud security

Application security

Threat modeling

Secure code reviews

CI/CD security automation

SOC 2 / ISO 27001 audits

Strumenti

Terraform

AWS

Descrizione del lavoro

• Own Drivetrain's security posture across product, cloud infrastructure, and internal systems.
• Work closely with Engineering, DevOps, and Compliance to build security into the shipping process.
• Protect data that finance leaders at enterprise companies rely on.

What You'll Do:

• Secure cloud infrastructure (AWS) including IAM, network security, secrets management, and logging.
• Embed security into the SDLC through threat modeling, secure code reviews, and automated scanning in CI/CD.
• Lead vulnerability management, detection and incident response, and compliance programs like SOC 2 Type II and ISO 27001.

What You Bring:

• 4-7 years of hands-on experience in security engineering, cloud security, or application security at a B2B SaaS company.
• Strong knowledge of AWS security services and Infrastructure as Code (Terraform or similar).
• Comfort writing code (Python, Go) to automate security tasks and experience supporting SOC 2 or ISO 27001 audits.

Drivetrain

Drivetrain is a financial planning & decision-making platform that helps companies scale and achieve targets predictably. Founded in 2021 by ex-Googlers, it is a remote-first, fast-growing startup backed by leading venture capital firms with a culture focused on autonomy, transparency, and customer-centricity.