Security engineer in platform services

Anaconda; United States; Remote; USD 150,000 - 210,000; Full time

Benefits offered by this job

Office setup reimbursement

Monthly productivity stipend

Learning and Development reimbursement

Open vacation policy

Public holidays

Snake Days-quarterly extra day off

Job summary

Anaconda ищет Security Engineer для разработки безопасных по умолчанию систем для платформы, обслуживающей миллионы пользователей. Вы будете работать над контролями, IAM, EDR, управлением секретами и безопасностью CI/CD в гибридной и многооблачной среде.

Кандидат с опытом в DevOps, системном администрировании и разработке, знанием облаков (AWS/Azure/GCP) и Terraform привлечет внимание. Предусматривается удаленная работа и гибкий график.

Responsibilities

• Проектирование и внедрение эффективных систем безопасности в гибридной и многооблачной среде
• Разработка автоматизации безопасности на Python, Go или Bash; управление инфраструктурой как кодом с Terraform
• Проведение оценки уязвимостей и управление рисками сервиса
• Проведение code reviews и архитектурных оценок для выявления рисков на ранних стадиях
• Интеграция защит в CI/CD через статический/ динамический анализ и сканирование зависимостей
• Реагирование на инциденты, проведение форензики и поддержка runbooks для критических рисков
• Сотрудничество с юридическим, IT и командами Platform Engineering для балансирования безопасности и скорости разработки
• Разработка безопасных шаблонов и инструментов, увеличивающих скорость разработки без потери безопасности

Job description

Описание

Anaconda's Security team protects and enables our platform, serving 50 million users and supporting our transition into an AI-native development platform. As a Security Engineer, you'll build secure‑by‑default systems through hands‑on engineering—designing controls that reduce systemic risk while helping engineering teams ship faster. Your work spans firewalls, IAM, endpoint detection, secrets management, and CI/CD pipeline security across hybrid and multi-cloud environments.

Задачи

• Design and implement security controls across firewalls, IAM, endpoint detection and response, and secrets management in hybrid and multi-cloud environments
• Build security automation and tooling using Python, Go, or Bash, managing infrastructure as code with Terraform to scale security operations
• Conduct vulnerability and threat management by triaging scanner output, investigating root causes, and driving risk reduction across the platform
• Perform code reviews and architecture assessments to identify security risks early in the development lifecycle
• Embed security into CI/CD pipelines through static analysis, dynamic testing, and dependency scanning
• Respond to security incidents as an escalation point, perform forensic analysis, and maintain tested runbooks for critical risks and zero-day events
• Partner with Legal, IT, Platform Engineering, and Developer Experience teams to balance security rigor with developer velocity
• Develop secure‑by‑default templates, libraries, and tooling that add velocity rather than friction

Требования

• 6+ years hands‑on experience in systems administration, DevOps, network engineering, or software development prior to or alongside security work
• Proficiency with cloud platforms such as AWS, Azure, or GCP
• Experience managing infrastructure as code using Terraform
• Experience writing scripts and automation in Python, Go, or Bash
• Working knowledge of IAM, PKI, cryptography basics, network protocol analysis, and threat modeling frameworks
• Experience working in containerised environments with Docker or Kubernetes
• Ability to communicate technical security risks to non‑security audiences and design workflows that respect developer experience

Будет плюсом

• Offensive security experience through penetration testing, red teaming, bug bounty programs, or reverse engineering
• Experience with advanced container security tools such as Falco or eBPF‑based monitoring
• Implemented zero trust architecture and network isolation in production environments
• Production engineering, SRE, or software engineering background with experience writing custom static or dynamic analysis rules, or managing SBOM and supply chain security
• Specialized expertise in HSMs, hardware tokens (YubiKeys, FIDO2), applied cryptography, or identity provider integrations
• Contributed to security culture through training programs, threat modeling workshops, CTF events, conference talks, or open‑source security projects
• Thrived in fast‑paced startup environments balancing speed with pragmatic risk management
• Experience working in a fast‑paced startup environment
• Experience working in an open‑source, AI, or data science‑oriented company

Условия

You'll thrive in a high‑performance environment where results are recognized and rewarded. Your work directly contributes to shaping the future of data science, machine learning, and AI in the enterprise. You'll work alongside a collaborative team that values diverse, thoughtful discussion, clarity and candor. You'll be supported by a culture that puts employees first - with flexible hours, a fully remote setup, and a genuine commitment to your wellbeing and growth. In addition to base salary, we offer a comprehensive benefits package that includes:

• Office setup reimbursement
• Monthly productivity stipend
• Learning and Development reimbursement
• Open vacation policy*
• Public holidays
• Snake Days-quarterly extra day off company wide