Senior Security Engineer

Silversmith Capital Partners; United States; Hybrid; USD 126,000 - 154,000; Full time

Benefits offered by this job

HDHP + telehealth

Calm subscription

LinkedIn Learning

Career growth

401(k) match

Remote stipend

Job summary

Silversmith Capital Partners seeks a Senior Security Engineer to own cloud security across AWS and automated tooling. You’ll architect controls, harden container pipelines, and build automation to scale security with minimal headcount.

You’ll drive security into CI/CD, partner with SecOps, and prototype new data sources and AI-enabled approaches to protect the platform. On-call rotation applies.

Qualifications

• 5+ years hands-on security engineering in AWS-based environments.
• Strong IaC skills with Terraform to enforce security via code.
• Experience with CNAPP/CSPM platforms (Wiz/Orca).
• Practical security design for containerized workloads (Kubernetes).
• Solid CI/CD security practices and artifact integrity.
• Proficient in Python for automation and workflows.
• Engineering-first collaborator with cross-team impact.

Responsibilities

• Define cloud security architecture and secure-by-default patterns in AWS.
• Own and optimize CNAPP tooling and automated remediation workflows.
• Embed security into CI/CD and IaC pipelines with guardrails.
• Hardening containerized workloads, clusters, and image supply chain.
• Build production-grade automation using Python and SOAR integrations.
• Collaborate with Identity and SecOps to close detection gaps.
• Prototype new data sources and AI/LLM-driven security approaches.

Skills

5+ years security engineering

AWS cloud security

Infrastructure-as-Code

CNAPP/CSPM platforms

Kubernetes (EKS)

CI/CD security

Python automation

engineering-first mindset

Tools

Terraform

Wiz/O rca CNAPP

Job description

We are looking for a Senior Security Engineer to own and advance the security of our cloud estate and the automated tooling that protects it. In this role, you won't just be managing alerts or triaging tickets—you'll be at the forefront of architecting controls across our AWS infrastructure, hardening our containerized pipelines, and building the automation necessary to scale security without scaling headcount. You'll work in a lean, engineering-first environment where your technical decisions directly shape how we secure our platform, our build systems, and our identity infrastructure. If you have a passion for treating security as code and want to see your contributions directly safeguard our company's trajectory, this is your opportunity to make a significant impact.

On a typical day, you might:

• Define and drive cloud security architecture and secure‑by‑default patterns across our AWS environment (IAM, VPC design, network segmentation, encryption, and KMS)
• Own and optimize our CNAPP tooling (Wiz), turning runtime, posture, and vulnerability signals into prioritized, automated remediation workflows
• Engineer security directly into our CI/CD and Infrastructure‑as‑Code workflows, embedding build‑time scanning and supply chain guardrails before code ships
• Harden containerized workloads, cluster configurations, workload isolation, and image supply chain integrity
• Build production‑grade automation in Python using our SOAR platform to eliminate manual toil, drive auto‑remediation, and streamline vendor integrations
• Partner cross‑functionally with Identity and SecOps teams to close cloud detection blind spots, feed high‑fidelity telemetry into security operations, and re‑architect authentication design
• Prototype and evaluate emerging data sources and cutting‑edge tooling, including AI/LLM‑driven approaches to scale cloud security work

Note: This position requires participation in an on‑call rotation to respond to critical security incidents.

What is needed:

• 5+ years of hands‑on experience in security engineering, with deep, proven ownership of cloud security in an AWS‑primary environment
• Strong technical proficiency in Infrastructure‑as‑Code, specifically reading and writing Terraform to enforce AWS IAM, VPC segmentation, and encryption patterns as code rather than documentation
• Expertise with CNAPP/CSPM platforms (Wiz, Orca, or similar) at the level of tuning policy, driving engineering remediation pipelines, and system integration
• Practical experience securing containerized workloads on Kubernetes (EKS or equivalent), including cluster hardening, image scanning, and runtime protection
• A solid grasp of CI/CD security, including artifact/supply‑chain integrity and embedding guardrails into pipelines without becoming a blocker to engineering velocity
• Proficiency in Python for building real‑world automation, auto‑remediation workflows, and data pipelines
• An engineering‑first mindset with exceptional collaboration skills, allowing you to partner seamlessly with platform and operations teams to solve complex infrastructure challenges

Benefits

• Comprehensive Health & Wellness: Top‑tier benefits package that includes a fully‑covered High Deductible Health Plan (HDHP), complimentary access to telehealth services, and a free subscription to Calm.
• Growth & Development: Access to LinkedIn Learning, professional development programs, and career growth opportunities in a fast‑growing organization.
• Generous Paid Time Off: Recharge and take the time you need to maintain work‑life balance with open PTO.
• Total Rewards: Generous 401(k) matching with immediate vesting, quarterly perks with commuter and lunch benefits for hub based employees or a stipend for remote workers, and a four‑week paid sabbatical with bonus after five years.
• Collaborative Culture: Work alongside brilliant, passionate colleagues in an environment that values innovation, teamwork, and mutual support.
• Salary: 126,000 - 154,000 USD a year

ActiveCampaign is an equal opportunity employer. We recruit, hire, pay, grow and promote no matter of gender, race, color, sexual orientation, religion, age, protected veteran status, physical and mental abilities, or any other identities protected by law.