Senior Security Engineer — AI-Driven Security Automation

C1; Portland (OR); On-site; USD 100,000 - 200,000; Full time

Benefits offered by this job

Equity

Health benefits

Competitive salary

Job summary

C1 is hiring a Senior Security Engineer to join a small, early-stage security team with a broad remit spanning security engineering, application and cloud security, and compliance. This is a generalist role: you'll have the opportunity to go deep in one domain over time while staying hands-on and supportive across others. Our stack is primarily Go and AWS.

Little of this job is manual. Instead of hand-reviewing every ticket, spec, or deploy, you'll spend your time building the purpose-built

Qualifications

• Senior security engineer role with hands-on security engineering, app and cloud security, and compliance.
• Go and AWS stack; focus on automation and security in the development lifecycle.
• Build agents and skills to automate security tasks and reduce manual work.

Responsibilities

• Define and drive security standards and secure-by-default solutions for applications and cloud.
• Build agents and skills to automate triage, enrichment, and review across the lifecycle.
• Shift security left by embedding risk-based review into design and architecture decisions.
• Develop security tooling and observability signals at scale across engineering teams.
• Lead threat modeling and risk assessment for high-risk features and platform changes.
• Assess risks from agentic development and AI-powered features in production.
• Collaborate with engineering to prioritize remediation and API security standards.
• Explore open-source tools to assess security and reduce manual review.
• Identify systemic risks and lead multi-team remediation end-to-end.

Skills

Security engineering

Application security

Cloud security

Go

AWS

Threat modeling

Automation

Open-source tooling

Tools

Kubernetes

Envoy

Istio

Consul

Cilium

Vault

Job description

C1 is hiring a Senior Security Engineer to join a small, early-stage security team with a broad remit spanning security engineering, application and cloud security, and compliance. This is a generalist role: you'll have the opportunity to go deep in one domain over time while staying hands-on and supportive across others. Our stack is primarily Go and AWS.

Little of this job is manual. Instead of hand-reviewing every ticket, spec, or deploy, you'll spend your time building the purpose-built