Senior Security Engineer: Build Security at Scale

VulnCheck Inc.; Lexington (VA); Remote; USD 150,000 - 190,000; Full time

Benefits offered by this job

Flexible time off

401k with match (US)

Comprehensive healthcare coverage

Parental leave

Remote-friendly environment

Home office stipend

Job summary

VulnCheck is seeking a Senior Security Engineer to partner with engineering on platform security, design reviews, and threat modeling. You will harden IaC, drive least-privilege IAM, and build scalable tooling for detection, response, and compliance.

You'll work with security analysts and engineers to automate security posture checks, respond to incidents, and contribute to SOC 2 readiness while growing in a supportive, remote-friendly environment.

Qualifications

• 5+ years in security engineering with deep AWS security expertise.
• Experience implementing IaC security with Terraform/Terragrunt.
• Strong knowledge of Kubernetes/EKS security, RBAC, and pod hardening.
• Experience documenting security work and communicating with engineers.

Responsibilities

• Partner with Engineering on platform security, design reviews, threat modeling, and secure-by-default patterns.
• Review and harden IaC across cloud environments (EKS, Aurora, OpenSearch, S3, IAM).
• Lead least-privilege IAM decomposition and adopt stronger identity patterns.
• Build tooling and automation to turn detection and response into repeatable processes.

Skills

AWS security

IaC (Terraform/Terragrunt)

Kubernetes/EKS security

RBAC & network policies

Incident response

Go (Golang)

Cloud security

Identity and access management

SOC 2

Tools

Terraform

Terragrunt

Kubernetes

OpenSearch

S3

IAM

CrowdStrike

Wiz

Security Hub

Google Workspace

Job description

VulnCheck is seeking a Senior Security Engineer to partner with engineering on platform security, design reviews, and threat modeling. You will harden IaC, drive least-privilege IAM, and build scalable tooling for detection, response, and compliance.

You'll work with security analysts and engineers to automate security posture checks, respond to incidents, and contribute to SOC 2 readiness while growing in a supportive, remote-friendly environment.