Senior Security Engineer

Bird; United States; In loco; USD 140.000 - 190.000; Tempo pieno

Descrizione del lavoro

Bird is seeking a Senior Security Engineer on the US East Coast to own security and IT across the company. You will hands-on pentest, fix vulnerabilities, tune detections, and harden Okta/GA Workspace, while collaborating with product engineering on SSO and SCIM.

You will help shape security across the stack, driving AI-enhanced automation and agentic triage in a fast-moving environment with ownership and visible impact.

Competenze

• 3+ years of hands-on security roles (pentesting, incident response, security engineering)
• Strong scripting/automation ability in at least one major language
• Curiosity to tackle problems beyond current role scope
• Comfort without a playbook and ability to propose solutions
• Experience using AI tooling as a day-to-day multiplier
• Excellent communication with engineers, leaders, and customers

Mansioni

• Pentest new features and products before shipment and own vulnerability triage and remediation
• Harden AWS environments with guardrails and detective controls; map and shrink internet-facing surface
• Build and tune security detections; manage alerts and act as incident handler
• Secure SaaS apps, IAM, Okta, and Google Workspace hardening
• Collaborate with engineering on customer-facing security features (SSO, SCIM, audit logs)
• Contribute to endpoint/device security (MDM, device lifecycle, hardening)
• Detect and prevent platform abuse and fraud
• Build security automations and AI-driven tooling
• Share operational load for access requests and IT support

Conoscenze

Penetration testing

Incident response

Automation scripting

AI tooling

Cloud security

Strumenti

AWS

Okta

SIEM

Descrizione del lavoro

We're looking for a US East Coast-based Senior Security Engineer to join Bird's security team: a small group of engineers and experienced security experts who own security (and IT) across the entire company. This is a hands-on builder role with a scope most security jobs can't offer. In the same week you might pentest a new product feature before release, ship the fix for a vulnerability you found, tune a detection in our SIEM, harden our Okta configuration, and pair with product engineering on a customer-facing feature like SSO or SCIM.

If you've been doing excellent work in a narrower role at a strong tech company — pentesting, incident response, detection, security engineering — and you want far more scope, responsibility, and freedom than a ticket queue allows, this role is built for you.

We're a small team based in the Netherlands and Belgium, and we work in a way that suits people who like ownership: we do what needs to be done, we do it fast, and we don't let blockers sit. Much of what we tackle has no mature process yet — you work out a sound path forward and take it. In return you get genuine autonomy, impact you can see across the company every day, and teammates who geek out about security. We also build with AI aggressively — agentic vulnerability triage, AI-assisted alert handling — and we expect you to treat AI as a daily multiplier, not a novelty.

Responsibilities

• Hack our platforms and products: pentest new features and products before they ship, and help run our vulnerability management program end-to-end — triaging findings from bug bounty, scanners, and pentests, and often fixing them yourself rather than handing them off.
• Harden our cloud environments: raise the security posture of our AWS organisations with preventative guardrails and detective controls (think SCPs, IMDSv2 enforcement, GuardDuty), and keep our internet-facing attack surface continuously mapped, scanned, and shrinking.
• Run and improve security monitoring and detection: build and tune detections, handle alerts, and act as a technical incident handler when something real happens.
• Secure our corporate environment: SaaS application security, identity and access management, Okta, and Google Workspace hardening.
• Build customer-facing security features alongside our engineering teams — SSO, MFA improvements, SCIM, audit logging, and session controls for our enterprise customers.
• Contribute to endpoint and device security (MDM, device lifecycle, endpoint hardening) — the security team owns IT at Bird, and everyone shares in it.
• Detect and prevent abuse and fraud on our platforms.
• Build security automations, increasingly with AI and LLMs - we'd rather automate a task than staff it.
• Take a rotating turn as the team's operational point of contact for access requests, security questions, and IT support - everyone shares the operational load, and we keep automating it down.

What We're Looking For

• 3+ years of hands-on experience in technical security roles - penetration tester, incident responder, security engineer, or similar. We care about demonstrated capability, not years served.
• You can script and automate in at least one major language and are comfortable reading code you didn't write.
• Deep technical curiosity: you take things apart to understand them, and you're drawn to problems beyond whatever your current role says you own.
• Comfort operating without a playbook: when you hit an unfamiliar problem, you work out a sound path forward instead of waiting for a defined process - and when something is material enough to escalating, you bring a recommendation, not an open question.
• A bias to done: thorough and organised, but you'd rather ship a good fix today than a perfect one next sprint. Blockers are things you clear, not things you report.
• You already use AI tooling as a serious force multiplier in your day-to-day work and want to push it further.
• Clear communication with engineers, leadership, and customers - you can explain the same vulnerability to the engineer fixing it and to an enterprise customer's security team.

Nice to Have

• You've shipped production code - the feature-development side of this role goes deeper if you have.
• Cloud security depth in AWS (IAM, organisation-level controls, GuardDuty) or Kubernetes security.
• Hands-on experience with Okta, MDM platforms (e.g. Jamf), or SIEM and detection engineering.
• A public security track record: bug bounty findings, CVEs, CTF placements, open-source tooling, or published research.
• Experience building with LLMs - agents, security automation, or internal tooling.