Security Engineer - Hands-On, Remote-First

Zeely Inc.; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Remote-first setup

Offices in Warsaw and Kyiv

Regular performance reviews

Job summary

Zeely is seeking a Security Engineer to identify and fix vulnerabilities across our product and cloud infrastructure, respond to incidents in real time, and close security tickets end to end.

This hands-on role collaborates with Engineering, DevOps, and Platform teams, helping strengthen security as Zeely scales and hardens our AWS environment while supporting SOC 2 and CASA compliance efforts.

Qualifications

• 5+ years engineering experience with ability to work independently.
• 2+ years hands-on security experience in a security/DevOps or platform role.
• Backend development in Node.js/JavaScript/TypeScript, Java, C#/ .NET, Go or Rust.

Responsibilities

• Identify, prioritize, and fix vulnerabilities across product and cloud infrastructure.
• Respond to security incidents and defend against attacks in real time.
• Close security tickets end to end, from investigation to fix in code or infrastructure.
• Integrate security checks and tooling into SDLC / CI/CD workflows.
• Review code and infrastructure changes from a security perspective.
• Help implement security controls and gather evidence for SOC 2, CASA compliance.
• Collaborate with DevOps and Platform on access management, secrets, and AWS hardening.

Skills

Engineering experience

Security experience

Backend development (Node.js/JS/TS)

DevOps / Cloud (AWS)

Vulnerability remediation (OWASP Top 5

Security incidents handling

English (B2+)

Ukrainian language

Job description

Zeely is seeking a Security Engineer to identify and fix vulnerabilities across our product and cloud infrastructure, respond to incidents in real time, and close security tickets end to end.

This hands-on role collaborates with Engineering, DevOps, and Platform teams, helping strengthen security as Zeely scales and hardens our AWS environment while supporting SOC 2 and CASA compliance efforts.