Senior Security Engineer

Scan Ninja Inc; Houston (TX); On-site; USD 140,000 - 210,000; Full time

Job summary

Scan Ninja Inc. is seeking a senior security engineer to lead high-impact security work across our product and platform.

You will partner with AI, infrastructure, and product teams to build security capabilities that are reliable, scalable, and production-ready. In this role you will design and build secure services for vulnerability detection, lead threat modeling, and create automation that reduces manual work for analysts and engineers.

Qualifications

• Hands-on experience with both application and infrastructure security.
• Strong knowledge of security controls in AWS, Azure, or GCP.
• Experience building or managing CI/CD pipelines with integrated security automation.
• Ability to explain technical risk clearly to engineering and business stakeholders.

Responsibilities

• Design and build secure services for vulnerability detection and remediation
• Lead threat modeling sessions and architecture reviews for new features
• Create security automation that reduces manual work for analysts and engineers
• Establish secure coding, deployment, and operational standards
• Mentor other engineers and help lead post-incident reviews

Skills

Application security

Infrastructure security

CI/CD security automation

Risk communication

Tools

AWS

Azure

GCP

Job description

Role Overview

In this role, you will lead high-impact security engineering work across our product and platform. You will partner closely with AI, infrastructure, and product teams to build and ship security capabilities that are reliable, scalable, and practical in production.

Responsibilities

• Design and build secure services for vulnerability detection and remediation
• Lead threat modeling sessions and architecture reviews for new features
• Create security automation that reduces manual work for analysts and engineers
• Establish secure coding, deployment, and operational standards
• Mentor other engineers and help lead post-incident reviews

Must-Have Qualifications

• Hands-on experience with both application and infrastructure security
• Strong knowledge of security controls in AWS, Azure, or GCP
• Experience building or managing CI/CD pipelines with integrated security automation
• Ability to explain technical risk clearly to both engineering and business stakeholders

Nice-to-Have

• Experience using LLMs or AI-assisted workflows in security use cases
• Industry certifications such as CISSP, OSCP, or similar
• Experience supporting compliance programs such as SOC 2 or ISO 27001