Senior Security Engineer - Cloud & App Protection Leader

Jobtailor; New York (NY); On-site; USD 140,000 - 190,000; Full time

Job summary

Jobtailor is seeking a security engineer to design and implement controls across applications, cloud environments, and development workflows. You will conduct threat modeling, architecture reviews, and security assessments for new products, while identifying and remediating vulnerabilities across the stack.

You will embed security into the SDLC through secure coding practices, automated testing, and tooling, and help build detection, monitoring, and incident response capabilities.

Qualifications

• 5+ years of experience across security engineering, application security, cloud security, infrastructure security, or related disciplines.
• Strong software engineering or systems engineering foundation.
• Proficiency in languages such as Python, Go, Java, JavaScript, TypeScript, or Rust.
• Experience securing cloud-native applications and infrastructure on AWS, GCP, or Azure.
• Knowledge of common vulnerabilities, attack techniques, and mitigation strategies.
• Experience with threat modeling, secure design reviews, or vulnerability research.
• Familiarity with IAM, secrets management, encryption, and network security.
• Experience building security automation and CI/CD integrations.
• Ability to communicate risks to engineering teams and stakeholders.
• Strong judgment around risk prioritization and remediation.

Responsibilities

• Design and implement security controls across applications, cloud infrastructure, internal systems, and development environments.
• Conduct architecture reviews, threat modeling, code reviews, and security assessments for new products and features.
• Identify, prioritize, and remediate vulnerabilities across the technology stack.
• Embed security into the software development lifecycle through secure coding standards, automated testing, and developer tooling.
• Build and improve detection, monitoring, incident response, and vulnerability management capabilities.
• Partner with engineering and infrastructure teams to strengthen cloud, container, network, identity, and access security.
• Lead or support the investigation and remediation of security incidents.
• Develop reusable security tooling, automation, documentation, and guardrails.
• Evaluate third-party technologies for potential security risks.
• Support customer security reviews, enterprise diligence, and compliance requirements.
• Help establish security policies aligned with SOC 2, ISO 27001, HIPAA, or PCI DSS.
• Mentor engineers and promote shared ownership of security.

Skills

Security Engineering

Cloud Security

Python

Threat Modeling

Vulnerability Management

CI/CD Integration

Incident Response

Risk Prioritization

Tools

AWS

GCP

Azure

Identity Management

Secrets Management

Encryption

Network Security

Job description

Jobtailor is seeking a security engineer to design and implement controls across applications, cloud environments, and development workflows. You will conduct threat modeling, architecture reviews, and security assessments for new products, while identifying and remediating vulnerabilities across the stack.

You will embed security into the SDLC through secure coding practices, automated testing, and tooling, and help build detection, monitoring, and incident response capabilities.