Security Engineer II: Secure SDLC & CI/CD

Madrona Venture Labs; Kirkland (WA); On-site; USD 114,000 - 171,000; Full time

Benefits offered by this job

RSU

Medical Insurance

Dental Insurance

Vision Insurance

401(k) match

Paid Time Off

Commuter Benefits

Job summary

Echodyne is seeking a Security Engineer II to join our fast-growing team to help build secure radar software. You will collaborate with engineering partners to embed security into the development lifecycle and delivery pipelines.

You will run scans across applications, code, dependencies, and supporting systems, triage findings, and guide developers on remediation. A strong grounding in application security is required to maintain a robust security posture.

Qualifications

• Experience with secure software development practices.
• Familiarity with security scanning tools for code, dependencies, containers, or infrastructure.
• Ability to assess findings and communicate remediation guidance clearly to developers.
• Working knowledge of common application security risks and secure coding principles.

Responsibilities

• Perform secure development work in partnership with engineering teams.
• Run and review security scans across applications, code, dependencies, and supporting systems.
• Identify weaknesses, triage findings, and suggest practical remediation steps and security improvements.
• Help integrate security checks into the software development lifecycle and delivery pipelines.
• Track recurring issues and recommend process or technical changes to improve overall security posture.

Skills

Secure SDLC

Security scanning tools

Remediation guidance

Application security

CI/CD security checks

Vulnerability management

Security collaboration with dev teams

Tools

Security scanners

Job description

Echodyne is seeking a Security Engineer II to join our fast-growing team to help build secure radar software. You will collaborate with engineering partners to embed security into the development lifecycle and delivery pipelines.

You will run scans across applications, code, dependencies, and supporting systems, triage findings, and guide developers on remediation. A strong grounding in application security is required to maintain a robust security posture.