Senior Security Engineer - AI/Cloud Security Lead (Equity)

Credit Sesame; United States; Remote; USD 170,000 - 215,000; Full time

Benefits offered by this job

Equity in a pre-IPO company

Medical, dental, and vision insurance

Home office stipend

Professional development program

Flexible paid time off

Multiple holidays and wellness days

Culture focused on wellness

Job summary

Credit Sesame is seeking a hands-on Security Engineer to own end‑to‑end security for our platform and AI-powered solutions. You will stand up open‑source tooling, write automation, and run assessments to protect data, users, and infrastructure.

You will review tools and vendors, manage access controls, run vulnerability programs, and lead incident response while collaborating with DevOps and engineering leadership. Strong AWS security experience and audits are essential.

Qualifications

• 7+ years of security engineering across app, cloud, and network security.
• Ability to lead tooling/architecture decisions and defend them to leadership.
• Self-directed, pragmatic, and able to prioritize effectively.
• Experience building production automation and integrations.
• Hands-on with OSS security tools and cloud security expertise (AWS).
• Knowledge of PCI DSS, SOC 2, ISO 27001 and control implementation.
• Curiosity for emerging security domains and threat modeling AI/LLM systems.
• Strong communication skills to translate risk for engineers and executives.
• Bonus: OSCP/GPEN, bug bounty, startup experience.

Responsibilities

• Run security reviews for new tools, vendors, and projects including data handling and third‑party reports.
• Own access and infrastructure security with IAM reviews and network audits.
• Manage vulnerability programs across cloud and endpoints and EDR/MDR tooling.
• Lead end‑to‑end security incident response with triage and runbooks.
• Implement controls for PCI DSS and SOC 2 / ISO 27001 and support audits.
• Partner with DevOps on patch management and secure defaults.
• Build in‑house AppSec scanning program and integrate tools into CI systems.
• Develop and automate internal security tooling and dashboards.
• Tune detection pipelines and write rules to catch real attack patterns.
• Threat‑model AI/LLM systems and coordinate external pentests where needed.
• Maintain security policies and drive company-wide training.

Skills

Security engineering

Application security

Cloud security

Network pentesting

Automation

OSS security tools

AWS security

Communication

Education

BS in Computer Science or equivalent

Tools

Burp Suite

OWASP ZAP

Nmap

Nuclei

Metasploit

Semgrep

Trivy

Wazuh/OSSEC

ELK/Kibana

Prowler/ScoutSuite

HashiCorp Vault

Job description

Credit Sesame is seeking a hands-on Security Engineer to own end‑to‑end security for our platform and AI-powered solutions. You will stand up open‑source tooling, write automation, and run assessments to protect data, users, and infrastructure.

You will review tools and vendors, manage access controls, run vulnerability programs, and lead incident response while collaborating with DevOps and engineering leadership. Strong AWS security experience and audits are essential.