Senior Security Engineer

Indeed; Annapolis (MD); On-site; USD 150,000 - 230,000; Full time

Benefits offered by this job

Medical/Dental/Vision

401k with company match

RSUs

Open PTO

Parental leave

Job summary

Indeed is hiring for a senior AppSec role in Annapolis, MD. The candidate will work on the AppSec Assessments team to protect Indeed’s applications and services by identifying security risks early and guiding remediation in a cloud-native environment.

The role emphasizes embedding security into the development lifecycle, cross-functional collaboration with product and engineering, and building scalable security processes.

Qualifications

• Bachelor's degree or higher in CS/Engineering/IS or related field with years of security experience
• Extensive AWS knowledge and cloud security expertise
• Proficient in security automation and scripting
• Experience with multiple programming/scripting languages (C#, Go, Java, Python, Rust, Ruby, HTML, Terraform, JS)
• Knowledge of CI/CD and infrastructure as code practices
• Strong understanding of defense in depth, zero trust, and ZTNA platforms
• Expertise in at least one security domain (e.g., Incident Response, App Security, Cloud Security) and virtualization/container security
• Knowledge of OWASP Top 10, SANS Top 25, NIST frameworks

Responsibilities

• Identify, resolve, and mitigate security issues across Indeed’s systems.
• Architect, build, monitor, and support security infrastructure in AWS.
• Develop team metrics to support security goals.
• Mentor juniors and participate in incident responses and on-call rotation.
• Mature Indeed’s ZTNA and Endpoint Security through tooling and partnerships.
• Share security trends and guidance with the team.

Skills

AWS expertise

CI/CD

Scripting languages

ZTNA

Security domains

OWASP/NIST

Education

Bachelor's degree in CS/Engineering/IS

Tools

Terraform

Job description

Our Mission

As the world’s number 1 job site*, our mission is to help people get jobs. We strive to cultivate an inclusive and accessible workplace where all people feel comfortable being themselves. We're looking to grow our teams with more people who share our enthusiasm for innovation and creating the best experience for job seekers.

(*Comscore, Total Visits, March 2026)

Day to Day

On the AppSec Assessments team, candidates should expect to play a central role in helping protect Indeed’s applications and services by identifying security risks early, partnering closely with product and engineering teams, and guiding practical remediation. This work requires exceptional technical judgment, clear communication, and the ability to influence without becoming a blocker. The team operates with the mindset that effective security comes from embedding into the development lifecycle, building trusted relationships, and helping teams make sound risk decisions in a fast-moving, cloud-native environment.

Candidates should also understand that this role goes beyond individual assessments. The team is growing and scaling, so there is a real opportunity to help shape how application security is delivered: improving workflows and tooling, contributing operational metrics and guidance, mentoring others, and raising the overall security bar through repeatable processes and excellent cross-functional partnership. It is a chance to do meaningful work with experienced security and engineering teams in support of Indeed’s mission, while helping secure a large-scale platform that serves millions of users daily.

Responsibilities

• Work with cross-functional teams to identify, resolve, and mitigate security issues in Indeed’s systems and processes.
• Evaluate, architect, build, monitor and support security infrastructure for use by security and others in AWS. Adapt to a fast-paced and dynamic cloud environment and manage and update workflow of team’s tools.
• Propose, produce and review team metrics in support of security goals.
• As a subject matter expert, curate Indeed’s knowledge through documentation, procedures, playbooks, runbooks, awareness content, and/or other inter- and intra-team activities. Participate in incident responses and on-call rotation as necessary. Act as a point of escalation for investigation of systems and security events monitored by your team. Investigate transactional data, log files and/or other system outputs to identify malicious or anomalous activity.
• Build, maintain and mature Indeed’s ZTNA solution and Endpoint Security domain through further tool acquisition or further utilization of existing tools.
• Feed team members and constituents with trends in the information security community including new vulnerabilities, methodologies, and products.
• Serve as a mentor to junior members of the group and triage of incoming issues using ticket tracking systems to delegate to junior members.

Skills/Competencies

• Requires a Bachelor’s degree in Computer Science, Computer Security, Engineering, Information Systems or related field, and a minimum of 5 years of related experience; or a Master’s degree with a minimum of 3 years of experience; or a PhD without experience
• Experience in Information Security, particularly in Cloud environments, with extensive knowledge of AWS infrastructure and services.
• Skilled in developing, implementing, and maintaining security solutions in AWS.
• Significant experience in development, automation and scripting languages such as C#, Go, Java, Python, Rust, Ruby, HTML, Terraform, or JavaScript.
• Experienced in leveraging CI/CD deployment methodologies and infrastructure as code.
• Excellent understanding of Information Security concepts including defense in depth, zero trust, and experience managing a ZTNA platform.
• Expertise in at least one security domain (e.g., Incident Response, Application Security, Infrastructure Security, Endpoint Security and Response, Detection Engineering, Network Security, Cloud Security, Cryptography, IAM, or Red Teams) and proficient in virtualization and container security.
• You possess advanced knowledge of application security principles, frameworks, and technologies such as OWASP Top 10, SANS Top 25, NIST, etc.

Salary Range Transparency

Tier 1 - United States of America 126,000 - 188,000 USD per year

Tier 2 - United States of America 140,000 - 210,000 USD per year

Tier 3 - United States of America 153,000 - 229,000 USD per year

Tier 4 - United States of America N/A

Tier 5 - United States of America 174,000 - 260,000 USD per year

Salary Range Disclaimer

The salary range for this role reflects the minimum and maximum compensation for the role. Offers are typically made between the range minimum and the range midpoint. Actual compensation will be determined based on job-related skills, experience, and expertise, as evaluated during the interview process. The range(s) listed is just one component of Indeed's total compensation package for employees. Other rewards may include quarterly bonuses, Restricted Stock Units (RSUs), a Paid Time Off policy, and many region-specific benefits. Compensation may also vary based on where a role is performed, as work locations are grouped into geographic pay tiers to reflect cost of labor differences in different geographic markets. Candidates can view geographic pay tiers by location on our career site ( https://www.indeed.com/careers/paytiers ), and recruiters can confirm how location is considered for a specific role.

Benefits - Health, Work/Life Harmony, & Wellbeing

We care about what you care about. We have a multitude of benefits to support Indeedians, as well as their pets, kids, and partners including medical, dental, vision, disability and life insurance. Indeedians are able to enroll in our company’s 401k plan, as well as an equity-based incentive program. Indeedians will also receive open paid time off, 11 paid holidays a year and up to 26 weeks of paid parental leave. For more information, select your country and learn more about our employee benefits, program, & perks at https://www.indeed.com/careers/benefits !

Equal Opportunities and Accommodations Statement

Indeed is deeply committed to building a workplace and global community where inclusion is not only valued, but prioritized. We’re proud to be an equal opportunity employer, seeking to create a welcoming and diverse environment. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, family status, marital status, sexual orientation, national origin, genetics, neuro-diversity, disability, age, or veteran status, or any other non-merit based or legally protected grounds.

Indeed provides reasonable accommodations to qualified individuals with disabilities in the employment application process. To request an accommodation, please visit https://www.indeed.com/careers/accommodations . If you are requesting accommodation for an interview, please reach out at least one week in advance of your interview.

For more information about our commitment to equal opportunity/affirmative action, please visit our Careers page ( https://www.indeed.com/careers ).

Inclusion & Belonging

Inclusion and belonging are fundamental to our hiring practices and company culture, forming an integral part of our vision for a better world of work. At Indeed, we’re committed to the wellbeing of our employees and on a mission to make this the best place to work and thrive. We believe that fostering an inclusive environment where every employee feels respected and accepted benefits everyone, fueling innovation and creativity.

We value diverse experiences, including those who have had prior contact with the criminal legal system. We are committed to providing individuals with criminal records, including formerly incarcerated individuals, a fair chance at employment.

Those with military experience are encouraged to apply. Equivalent expertise demonstrated through a combination of work experience, training, military experience, or education is welcome.

Indeed’s Employee Recruiting Privacy Policy

Like other employers Indeed uses our own technologies to help us find and attract top talent from around the world. In addition to our site’s user and privacy policy found at https://www.indeed.com/legal , we also want to make you aware of our recruitment specific privacy policy found at https://www.indeed.com/legal/indeed-jobs .

AI Notice

Indeed is committed to ensuring fairness and transparency throughout our hiring process. We use artificial intelligence (AI) tools to assist in the screening, assessment, and selection of applicants for this position by analyzing information provided in resumes and applications. Our use of AI does not replace human decision-making.

Unless otherwise notified, Indeed does not use AI constituting an AEDT or an ADMT as those tools are defined in applicable laws.

U.S. Remote & Massachusetts Roles

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.