Senior Security Engineer

Pacvue Corporation; Chicago (IL); On-site; USD 150,000 - 160,000; Full time

Benefits offered by this job

Paid Time Off

Paid Holidays and Floating Holidays

Medical, Dental, Vision, FSA/HSA, Life

Pet Insurance

401k with Employer Match

Volunteer Time Off

Job summary

Pacvue Corporation is seeking a Senior Security Engineer (AWS) to enhance our cloud and application security practices. You will partner with Engineering, DevOps, and IT to implement security controls, strengthen resilience, and ensure secure, compliant environments across cloud and software layers.

This hands-on role demands technical leadership, collaboration across teams, and ongoing contribution to security initiatives, tooling, and incident response processes.

Qualifications

• 5–8+ years of experience in security engineering, cloud security, or a related field.
• 3+ years of hands-on AWS security experience in a production environment.
• Experience with AWS security services such as IAM, GuardDuty, Security Hub, AWS Config, and CloudTrail.
• Familiarity with application security tools (SAST, DAST, SCA).
• Experience with infrastructure-as-code tools such as Terraform or AWS CDK.
• Understanding of vulnerability management practices.
• Familiarity with security and compliance frameworks (SOC 2, ISO 27001, CIS Benchmarks).
• Strong communication skills and ability to work effectively with cross-functional teams.

Responsibilities

• Cloud Security (AWS): Implement and maintain AWS security configurations across development, staging, and production environments.
• Apply IAM best practices, including least-privilege access and role-based access controls.
• Configure and monitor AWS-native security services such as CloudTrail, GuardDuty, Security Hub, AWS Config, and Macie.
• Participate in cloud security reviews for new and existing services.
• Support security best practices in infrastructure-as-code (Terraform, AWS CDK) and CI/CD pipelines.
• Help maintain cloud security baselines aligned to CIS Benchmarks and AWS Well-Architected Framework.

Skills

Security engineering

AWS security

SAST

DAST

SCA

Terraform

AWS CDK

Vulnerability management

SOC 2

ISO 27001

Communication skills

Cross-functional collaboration

Cloud security

Tools

AWS CloudTrail

AWS GuardDuty

AWS Security Hub

AWS Config

AWS Macie

Snyk

Checkmarx

Veracode

Semgrep

Job description

Pacvue is the leading software suite for eCommerce advertising, sales, and intelligence. We help some of the world’s largest brands grow their business on Amazon, Walmart, Instacart, and other marketplaces and work with sellers and agencies of all sizes to help them compete in the constantly changing world of online retail. Our mission is to empower teams to win in the future of eCommerce, and we do it by building first-to-market technology, solving complex problems with our customers, and bringing expertise, collaboration, and innovation to our work every single day.

Why work at Pacvue?

• Be on the cutting edge - Pacvue is transforming the way brands and sellers win online. Our product uses machine learning, artificial intelligence, and data to make intelligent decisions and recommendations.
• Have fun – we have an energetic and passionate team with a joint mission to win and help our brands and sellers succeed.
• Learn – from the best! Our team is full of talented people who want to help you learn, grow – providing you with mentorship, the industry’s best practices and thought leadership.
• Grow fast – the eCommerce industry has grown fast in the past 2-3 years. Pacvue has grown even faster than most high-tech companies in the market.

About the role:

TheSeniorSecurity Engineer (AWS) is a senior individual contributor responsible for supporting and enhancingPacvue’scloud and application security practices. This role works closely with Engineering, DevOps, and IT to implement security best practices, improve system resilience, and help ensure our environments are secure and compliant.

This is a hands-on role for a security practitioner who brings strong technicalexpertiseand enjoys collaborating with cross-functional teams to strengthen security across cloud infrastructure and applications. You will contribute to ongoing security initiatives, supportprogram execution, and help drive continuous improvement.

Responsibilities:

Cloud Security (AWS)

• Implement andmaintainAWS security configurations across development, staging, and production environments
• Apply IAM best practices, including least-privilege access and role-based access controls
• Configure andmonitorAWS-native security services such as CloudTrail,GuardDuty, Security Hub, AWS Config, and Macie
• Participate in cloud security reviews for new and existing services
• Support security best practices in infrastructure-as-code (Terraform, AWS CDK) and CI/CD pipelines
• Helpmaintaincloud security baselines aligned to CIS Benchmarks and AWS Well-Architected Framework

Application Security

• Contribute to secure Software Development Lifecycle (SDLC) practices, including shift-left security efforts
• Participate in threat modeling and security design reviews
• Operate SAST, DAST, and SCA tools integrated into CI/CD pipelines (e.g., Snyk,Checkmarx, Veracode,Semgrep)
• Partner with engineering teams to remediate vulnerabilities and improve secure coding practices
• Support development and maintenance of secure coding guidelines

Vulnerability Management

• Assistin vulnerability identification, triage, and remediation tracking across infrastructure and applications
• Support internal and external penetration testing activities
• Help track and report on vulnerability metrics and remediation progress

Cross-functional Collaboration

• Support compliance efforts such as SOC 2 Type II and ISO 27001 audits
• Collaborate with team members to improve security processes and documentation
• Contribute to security runbooks and incident response procedures

Skills & Qualifications:

• 5–8+ years of experience in security engineering, cloud security, or a related field
• 3+ years of hands-on AWS security experience in a production environment
• Experience with AWS security services such as IAM,GuardDuty, Security Hub, AWS Config, and CloudTrail
• Familiarity with application security tools (SAST, DAST, SCA)
• Experience with infrastructure-as-code tools such as Terraform or AWS CDK
• Understanding of vulnerability management practices
• Familiarity with security and compliance frameworks (SOC 2, ISO 27001, CIS Benchmarks)
• Strong communicationskills and ability to work effectively with cross-functional teams
• FlexiblePaid Time Off
• Paid Holidays and Floating Holidays
• Medical, Dental, Vision, FSA/HSA, Life Insurance and Pet Insurance
• 401k with Employer Match
• Take up to 2 Days of Paid Time Off to Volunteer with a 501c Organization

The annual base salary range for this position is $150,000-$160,000 USD. The actual salary will vary depending on the applicant’s experience, skills, and abilities as well as internal equity and market data for their location. This position is also eligible for an additional annual bonus compensation through one of Pacvue’s highly attractive incentive plans, full details will be provided during the recruitment process.

Pacvue is committed to employing a diverse workforce. Qualified applicants will receive consideration without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity, gender expression, veteran status, or disability.

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in Pacvue’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.