Security Officer

Zeely Inc.; United States; Remote; USD 140,000 - 210,000; Full time

Benefits offered by this job

Remote-first setup

Office presence in Europe

Equipment provided

Job summary

Zeely Inc. is seeking a Security Officer to own security across our products and infrastructure, collaborating with our Principal System Architect and Platform, DevOps, and Backend teams as a trusted partner with authority over security decisions.

You'll lead incident response, shape the security roadmap, and drive compliance initiatives including SOC 2 (Type 1) and ISO 27001. Strong backend, DevOps, and AWS experience are essential.

Qualifications

• 7+ years of engineering experience.
• 3+ years in a Security Officer or Security Engineer role.
• Hands-on backend development background.
• Proven experience fixing vulnerabilities and handling incidents.
• Experience implementing SOC 2 and ISO 27001 controls end-to-end.
• External security audits experience a plus.
• Upper-Intermediate English (B2+) or higher; Ukrainian fluency a plus.

Responsibilities

• Assess infrastructure and product from a security perspective.
• Identify, prevent, and fix vulnerabilities across product and infra.
• Lead incident response and defend against real-time attacks.
• Define and prioritize security initiatives and roadmap.
• Hands-on security work and collaboration with DevOps and Platform teams.
• Integrate security into SDLC / CI/CD.
• Drive SOC 2 (Type 1) and ISO 27001 controls.
• Develop security policies and access management for AWS.

Skills

Security engineering

Incident response

DevOps collaboration

Backend development

Education

AWS Certification (Professional)

Tools

Node.js

JavaScript

TypeScript

Java

C# / .NET

AWS

GCP

Job description

Join Zeely as a Security Officer and help us strengthen and scale security across our products and infrastructure.

You'll own the development of security across the company and work closely with our Principal System Architect and the Platform, DevOps, and Backend teams as a trusted partner with real authority over technical decisions from a security perspective.

About Us:
Zeely is the agentic AI platform for creating, launching, and scaling paid ads.

Simply put: we've made the best AI solutions and marketing tools available to small and medium businesses — tools that used to be reserved for big brands with expensive marketing teams.

The next big step: a B2B solution for large marketing teams and enterprise clients — workflows, creative analytics, and full control over campaigns across the whole team. For companies where performance marketing already runs at scale and needs more efficiency and automation.

A few numbers that speak for themselves:

• 4 years on the market — a stable, profitable company backed by international investors;

• 6× growth over the past year;

• 2,000,000+ businesses already use Zeely;

• #1 in its category in the US market;

• 200+ specialists on the team;

• Markets: US + worldwide.

What You'll Do:

• Assess our infrastructure and product from a security perspective;

• Proactively identify, prevent, and help fix vulnerabilities across our product and infrastructure;

• Lead incident response and help defend against attacks in real time;

• Define and prioritize security initiatives and shape the security roadmap;

• Work hands-on: close security tickets yourself and collaborate closely with the DevOps and Platform teams on implementation;

• Integrate security into our development pipeline (SDLC / CI/CD);

• Drive compliance initiatives, mainly SOC 2 (Type 1) and CASA, and implement relevant ISO 27001 controls;

• Develop security policies, processes, and access management practices across our cloud infrastructure (AWS);

• Review architecture decisions and code from a security perspective;

• Support B2B clients with security-related questions, reviews, and due diligence.

What Do You Need to Join Us?

• 7+ years of engineering experience;

• 3+ years in a Security Officer or Security Engineer role (a combined Security/DevOps role works too);

• Hands-on backend development background (Node.js / JavaScript / TypeScript, Java, or C#/.NET);

• Strong practical experience in DevOps and cloud infrastructure;

• Proven experience finding and fixing vulnerabilities and handling security incidents;

• AWS Professional-level certification (a security-focused Associate certification may also be considered);

• Hands-on experience implementing SOC 2 and/or ISO 27001 controls — owning the process end to end, not just maintaining existing policies;

• Experience with external security audits (Big Four experience is a plus);

• Upper-Intermediate (B2+) English or higher;

• Fluent Ukrainian.

Nice to Have:

• Experience with CASA assessments;

• Experience implementing GDPR and/or CCPA (CPRA) requirements;

• Understanding of PCI DSS (SAQ-A level);

• GCP certifications.

Why It's Worth Joining Us:

• A chance to shape how security evolves in a stable, profitable product company;

• A role with real ownership, including veto power over technical decisions from a security perspective;

• A clear growth path toward leading a security team;

• Work with cutting-edge technologies and contribute to building AI-powered tools;

• A strong team of A-level players who push each other to grow;

• A remote-first setup with offices in Warsaw and Kyiv;

• All the equipment you need for work, provided by the company;

• Regular performance reviews to keep your growth transparent and rewarded.

Recruitment Process:

Intro Call – Technical Interview – Test Task – Final Interview – Reference Check – Offer.