Senior Security & Compliance Engineer - Hybrid (Austin)

Biorce; Austin (TX); Hybrid; USD 120,000 - 190,000; Full time

Benefits offered by this job

Hybrid work model

Private health coverage

Gym membership

MacBook and security tools

Pet-friendly office in Barcelona

Company events

Job summary

Biorce in Austin is seeking a security-focused professional to lead application security across backend and frontend systems. You will implement and manage security scanning tools and strengthen the CI/CD security pipeline to protect products and data.

You will collaborate with engineering, DevOps, and product teams to improve security while enabling rapid development, respond to incidents, and drive security training across the company.

Qualifications

• Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Security, or a related field, with 4+ years of security experience.
• Hands-on security code reviews, threat modeling, and vulnerability assessments.
• Experience with AppSec tools such as Aikido, Snyk, or equivalents like GitHub Advanced Security or SonarQube.
• Experience with GRC tools like Vanta, Drata, Secureframe, or similar platforms.
• Knowledge of OWASP Top 10, secure SDLC, dependency management, and RBAC/authorization patterns.
• Familiar with CI/CD pipelines, Docker, Kubernetes, and cloud services (AWS, GCP, Azure).
• Incident response, log analysis, and security monitoring.
• Proficient with Git, Confluence, Jira.
• Bonus: infrastructure-as-code security (Terraform, Pulumi).
• Bonus: Certifications (OSCP, OSWE, CISSP, CSSLP).
• Bonus: Leading penetration testing or coordinating with third-party assessors.
• Bonus: Exposure to SOC 2, HIPAA, GDPR, ISO 27001.

Responsibilities

• Conduct in-depth security code reviews across backend and frontend repositories to identify vulnerabilities and enforce secure coding best practices.
• Implement, integrate, and manage security scanning tools such as Aikido, Snyk, or similar solutions to strengthen the application security pipeline.
• Develop and maintain automated security checks within CI/CD workflows to ensure continuous enforcement of standards.
• Support compliance and governance initiatives by operating and optimizing GRC platforms like Vanta or comparable tools.
• Collaborate closely with engineering, DevOps, and product teams to improve security posture while enabling rapid development.
• Monitor, investigate, and respond to security incidents, ensuring timely resolution and root-cause analysis.
• Drive internal security training and foster a culture of security awareness across the company.

Skills

Security code reviews

Threat modeling

Vulnerability assessments

CI/CD security

Incident response

Log analysis

Security monitoring

Git

Confluence

Jira

Education

Bachelor's/Master's in CS/Cybersecurity

Tools

Aikido

Snyk

GitHub Advanced Security

SonarQube

Terraform

Pulumi

Vanta

Drata

Secureframe

Job description

Biorce in Austin is seeking a security-focused professional to lead application security across backend and frontend systems. You will implement and manage security scanning tools and strengthen the CI/CD security pipeline to protect products and data.

You will collaborate with engineering, DevOps, and product teams to improve security while enabling rapid development, respond to incidents, and drive security training across the company.