Senior Security Engineer - AI, Cloud & Secure SDLC Leader

Veeam Software, Inc.; San Jose (CA); On-site; USD 289,000 - 537,000; Full time

Benefits offered by this job

Unlimited PTO

Paid holidays

Healthcare package

Mental health support

401(k) plan

Learning resources

Job summary

Veeam Software, Inc. is seeking a Staff Security Engineer to provide hands‑on technical leadership across product and application security.

You will shape secure architecture, strengthen the SDLC, and help engineering teams ship secure cloud and AI capabilities at scale. This senior IC role covers threat modeling, code reviews, vulnerability handling, and penetration testing, with a focus on multi‑tenant cloud security and compliance readiness.

Qualifications

• 8+ years in security, with substantial experience in application or product security for SaaS or cloud‑native platforms.
• Strong coding and code‑review skills in Go, Python, Java, or TypeScript, with the ability to validate vulnerabilities and build security tooling.
• Deep knowledge of multi‑tenant cloud security across AWS, Azure, or GCP, including IAM, Kubernetes, secrets, tenant isolation, and protection of sensitive customer data.
• Hands‑on experience securing LLM‑powered applications, including prompt injection, retrieval leakage, agent authorization, and model supply chain risks.
• Demonstrated experience building or materially improving a secure SDLC across multiple engineering teams.
• Experience leading vulnerability response or coordinated disclosure, including severity assessment, CVE processes, remediation, and customer communications.
• Practical knowledge of software supply chain security, including SBOM, signing, SLSA, and SSDF concepts.
• Working experience with security assurance frameworks such as SOC 2, ISO 27001, or FedRAMP.
• Strong communication skills and the ability to explain technical risk clearly to engineers, executives, auditors, and customers.
• A computer science or engineering degree, or equivalent practical experience.

Responsibilities

• Own and evolve the secure SDLC across the Securiti portfolio, including threat modeling, design reviews, secure code review, and security testing.
• Provide security leadership for AI capabilities, including LLM‑powered features, agents, copilots, prompt injection, retrieval leakage, permissions, and model supply chain risks.
• Tune and improve SAST, dependency, secrets, container, infrastructure, and SBOM controls so findings are actionable and integrated into engineering workflows.
• Lead product vulnerability response from reproduction and severity assessment through remediation, coordinated disclosure, CVE handling, and customer advisories.
• Perform targeted penetration testing and security research across applications, APIs, agents, connectors, and cloud services; scope and validate third‑party testing.
• Strengthen software supply chain security through SBOMs, signed and reproducible builds, dependency governance, and secure release practices.
• Build reusable security libraries, reference implementations, hardening guidance, and developer enablement; help scale security through a Security Champions program.
• Track and communicate meaningful security metrics, including remediation time, critical/high findings, scan coverage, and engineering adoption.

Skills

Go

Python

Java

TypeScript

Cloud security

Threat modeling

Vulnerability management

SAST/SBOM

CVE handling

Security leadership

Education

Computer science or engineering degree

Tools

SAST tools

SBOM tooling

CI/CD tooling

Job description

Veeam Software, Inc. is seeking a Staff Security Engineer to provide hands‑on technical leadership across product and application security.

You will shape secure architecture, strengthen the SDLC, and help engineering teams ship secure cloud and AI capabilities at scale. This senior IC role covers threat modeling, code reviews, vulnerability handling, and penetration testing, with a focus on multi‑tenant cloud security and compliance readiness.