Senior Security Engineer: App & Cloud Security (NYC Onsite)

Infinite Edge, Inc; New York (NY); On-site; USD 170,000 - 240,000; Full time

Job summary

Infinite Edge, Inc. is seeking a Senior Security Engineer to protect customer data and applications. You will own security across our apps, cloud infrastructure and internal systems, ensuring secure delivery without slowing down product velocity.

This in-person role sits at our New York City office, five days a week. You\'ll lead vulnerability management, threat modeling, incident response, and secure coding training, partnering with engineering, product, and operations to raise security

Qualifications

• 5+ years in security engineering, application security or cloud security.
• Hands-on experience securing AWS environments.
• Strong understanding of web and mobile application security, including the OWASP Top 10.
• Able to read and write code in at least one language, such as Rust, Python, Go or TypeScript.
• Experience leading incident response.
• Able to explain risk clearly and give engineers practical fixes.

Responsibilities

• Find and fix vulnerabilities across our mobile, web, and backend apps
• Secure our AWS environment, including access management, networking and secrets
• Run threat modeling and security reviews for new features
• Build security checks into CI/CD, such as code scanning and dependency checks
• Lead incident detection and response, including logging, alerting and playbooks
• Follow security news and disseminate relevant information to the team
• Prevent account takeover, bots and abuse on our site and app
• Manage penetration tests, bug bounty reports and vendor security reviews
• Support compliance work such as PCI DSS and privacy laws
• Train engineers on secure coding

Skills

Security engineering

Application security

AWS security

Threat modeling

Incident response

Risk assessment

Job description

Infinite Edge, Inc. is seeking a Senior Security Engineer to protect customer data and applications. You will own security across our apps, cloud infrastructure and internal systems, ensuring secure delivery without slowing down product velocity.

This in-person role sits at our New York City office, five days a week. You\'ll lead vulnerability management, threat modeling, incident response, and secure coding training, partnering with engineering, product, and operations to raise security