Senior Security Engineer — Cloud & App Security

Simple Life; United States; Remote; USD 140,000 - 190,000; Full time

Job summary

Simple Life is seeking a hands-on Senior Security Engineer to design, implement, and improve security controls across our applications, cloud environments, and development pipelines. You will work directly with Engineering and SRE to build security into our systems, with an engineering-first mindset that emphasizes code, infrastructure, and automation.

The role focuses on securing Go-based services running on AWS and Kubernetes/EKS, driving threat modeling, secure design reviews, and incident

Qualifications

• 5+ years of experience in security engineering, application security, cloud security, or software engineering with a security focus.
• Familiarity with HIPAA, SOC 2, or ISO 27001 requirements.
• Strong hands-on experience in application security, cloud security, or both, with a willingness to work across these areas.
• Production experience with AWS and Kubernetes.
• Good understanding of web and API security, authentication, authorization, and common application vulnerabilities.
• Ability to read and write code in Go, Python, or a similar language.
• Experience with CI/CD security and infrastructure-as-code.
• Experience working with security scanning tools and vulnerability management.
• Understanding of IAM, cloud networking, secrets management, and container security.
• Ability to independently investigate technical problems and implement practical solutions.
• Comfortable working directly with developers and infrastructure engineers.
• Strong written and spoken English.

Responsibilities

• Improve application security across the SDLC through threat modeling, secure design reviews, code review, and automated security testing.
• Implement and maintain security controls in AWS and Kubernetes/EKS, including IAM, network policies, secrets management, workload security, and admission control.
• Develop security automation, infrastructure-as-code policies, and reusable tooling for engineering teams.
• Investigate vulnerabilities, assess their exploitability, and work with engineering teams on remediation.
• Support technical security assessments, penetration testing, and remediation of identified findings.
• Help improve security logging, detection, and incident response capabilities.
• Implement and maintain technical controls supporting HIPAA, SOC 2, and other relevant requirements.
• Take security engineering projects from design through implementation, rollout, and ongoing improvement.

Skills

Security engineering

Application security

Cloud security

Go

Python

CI/CD security

Vulnerability management

Incident response

Threat modeling

Code review

Tools

AWS

Kubernetes

Istio

Kyverno

OPA

Cosign

Sigstore

Syft

Job description

Simple Life is seeking a hands-on Senior Security Engineer to design, implement, and improve security controls across our applications, cloud environments, and development pipelines. You will work directly with Engineering and SRE to build security into our systems, with an engineering-first mindset that emphasizes code, infrastructure, and automation.

The role focuses on securing Go-based services running on AWS and Kubernetes/EKS, driving threat modeling, secure design reviews, and incident