Security Software Engineer

Gomotive; United States; Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Paid time off

Job summary

Gomotive is seeking a Senior Security Engineer to design and implement authentication and authorization across our software products and cloud infrastructure. You will embed secure practices into the SDLC, drive threat modeling, and mentor engineers on security decisions.

You will partner with cross-functional teams to reduce risk, implement encryption controls, and lead vulnerability remediation and security testing efforts. This role requires strong coding skills and cloud security expertise.

Qualifications

• Five+ years in software security engineering or related field.
• Strong programming experience in Python, Go, or JavaScript.
• Experience building authentication, OAuth, authorization, or identity systems.
• Knowledge of OWASP Top 10 and secure coding practices.
• Experience securing cloud apps/infrastructure, especially AWS.

Responsibilities

• Design and maintain authentication flows and OAuth integrations across products.
• Build authorization services for secure access to features and data.
• Develop bring-your-own-key capabilities and data protection controls.
• Create security services, tooling and automation for products and cloud.

Skills

Python

Go

JavaScript

Authentication

OAuth

Authorization

Identity systems

OWASP Top 10

Cloud security AWS

Threat modeling

Vulnerability management

Cross-team collaboration

Tools

Containers

Orchestration

Secrets management

Encryption

Static analysis

Dynamic analysis

Dependency scanning

Penetration testing

Job description

Role overview

Build security capabilities that protect software products, cloud infrastructure, and customer data. This senior engineering role combines hands-on development with security architecture and cross-team guidance, embedding secure practices into the software development lifecycle. The work includes identity and access features, customer-controlled encryption capabilities, security automation, and risk reduction across product systems.

Responsibilities

• Design and maintain authentication flows and OAuth integrations across products.
• Build authorization services that provide secure, scalable access to product features and customer data.
• Develop bring-your-own-key capabilities and related data protection controls.
• Create security services, tooling, and automation for products and cloud infrastructure.
• Review architecture, code, data handling, and threat models to find and reduce security risks.
• Partner with engineering and product teams on vulnerability remediation, security testing, and reusable secure design guidance; mentor engineers on security decisions.

Requirements

• At least five years of experience in software engineering, security engineering, application security, or a related field.
• Strong programming experience in Python, Go, JavaScript, or a comparable language.
• Experience building authentication, OAuth, authorization, or identity systems.
• Knowledge of common application security weaknesses, including OWASP Top 10 risks, and experience addressing them.
• Experience securing cloud applications and infrastructure, particularly in AWS, with secure development, threat modeling, and vulnerability management practices.
• Ability to collaborate across teams and explain security issues clearly.

Nice to have

Familiarity with containers and orchestration, identity and access management, secrets management, encryption, and open-source security tools. Experience with security testing methods such as static or dynamic analysis, dependency scanning, penetration testing, or attack-tree analysis is relevant.

Benefits and work setup

The source lists health, dental, vision, pharmacy, paid leave, disability and life coverage, and retirement contributions, subject to eligibility. For Canada-based candidates, the stated compensation range is CAD $146,000–$180,000. Some interviews or onboarding sessions may take place in person.