Senior Security Engineer

CompanyCam; United States; Remote; USD 130,000 - 170,000; Full time

Job summary

An innovative firm is seeking a Senior Security Engineer to lead security engineering and compliance initiatives. This role focuses on implementing security controls, managing vulnerabilities, and ensuring compliance with standards like SOC 2 and GDPR. Join a remote-first team that values collaboration, continuous learning, and work-life balance. You'll contribute to a culture of respect and autonomy while enabling developers to ship secure products. If you're passionate about scalable security and proactive compliance, this opportunity is perfect for you.

Qualifications

• 5+ years in security engineering or infrastructure security.
• Strong experience with AWS and security automation.
• Knowledge of compliance frameworks and data privacy laws.

Responsibilities

• Develop tooling for secure code delivery and infrastructure validation.
• Design access controls based on least privilege.
• Conduct threat detection and manage sensitive data handling.

Skills

Security Engineering

Cloud Platforms (AWS)

CI/CD

Security Automation

Compliance Frameworks (SOC 2, ISO 27001)

Data Privacy Laws (GDPR, CCPA)

Pen Testing

Web Security

Scripting (Ruby, Bash)

Communication Skills

Job description

Hi, we’re CompanyCam.

We’re a simple-to-use photo documentation and productivity app for contractors across all commercial and home services industries. Packed with intuitive features, CompanyCam enhances communication and accountability throughout a contractor’s business. Our goal is to provide a consumer-grade, game-changing experience that helps users build trust with their company and customers.

Despite our professional focus, the people behind our product are laid-back, genuine, and hardworking — and you could be one of them!

The Role

We’re seeking a Senior Security Engineer to lead security engineering and compliance initiatives for our app. You will collaborate with engineering teams to design, implement, and automate security controls that meet standards like SOC 2, GDPR, and CCPA. You’ll be responsible for security architecture, vulnerability management, and proactive threat mitigation.

If you are passionate about scalable security, proactive compliance, and enabling developers to ship secure products, we want to hear from you.

Location: Candidates must be based in the United States. Remote work is supported, with occasional travel to Lincoln, Nebraska, for company meetings.

Working At CompanyCam

Our engineering team is remote-first, spanning all U.S. time zones. We value diverse backgrounds and prioritize skills and attitude over formal education. We believe in trust, collaboration, and continuous learning, following practices like Agile, Sprints, Kanban, and Shape Up. Our teams consist of product managers, designers, QA engineers, senior developers, and other engineers, working together to produce high-quality work.

We also value work-life balance, encouraging focused work hours, and explicitly avoiding nights and weekends. Our culture emphasizes respect, autonomy, and personal growth.

What You’ll Do

• Develop tooling to support secure code delivery and infrastructure validation
• Design and enforce access controls based on least privilege and segregation of duties
• Advise teams on security best practices to ensure compliance
• Manage sensitive data handling, including encryption and secure deletion
• Create automated security incident response playbooks and handle real incidents
• Conduct threat detection, investigation, and forensic activities
• Monitor third-party and supply chain risks through assessments and reviews
• Report on vulnerability trends and remediation efforts
• Lead security training initiatives to educate teams on policies and regulations
• Contribute to security documentation, guidance, and internal training

What You’ll Bring

• 5+ years of experience in security engineering or infrastructure security
• Strong experience with cloud platforms, preferably AWS
• Hands-on experience with CI/CD, infrastructure as code, and security automation
• Knowledge of compliance frameworks like SOC 2 and ISO 27001, and data privacy laws like GDPR and CCPA
• Experience with pen testing, red teaming, or offensive security
• Proficiency in web security, ideally with Ruby on Rails, Django, or Express
• Scripting skills in Ruby and Bash are a plus
• Ability to balance security risks with product goals
• Excellent communication skills for technical and non-technical audiences
• Comfort with ambiguity and fast-paced environments
• A growth mindset focused on learning and improvement
• Creativity and innovation in solving complex problems

Benefits & Compensation

This is a salaried role with a starting annual salary of $130,000 - $170,000, depending on experience. We offer equity and other benefits. Details can be found here.

We are committed to inclusivity and encourage applicants from all backgrounds. Even if you don’t meet every requirement, we encourage you to apply. We value passion and dedication over box-checking.

For accommodations or questions about the application process, email [e-mail]. Please do not include medical or health information in your email.