Senior Security Engineer - Cloud & AppSec

Credit Sesame; Mountain View (CA); On-site; USD 170,000 - 215,000; Full time

Benefits offered by this job

Equity in pre-IPO company

Health, dental, and vision insurance

Monthly home office stipend

Professional development program

Flexible paid time off

11 holidays + 6 wellness days

Job summary

Credit Sesame is seeking a Senior Security Engineer to lead security reviews, protect access controls, and drive incident response across cloud and on‑premises environments. You will implement PCI DSS and SOC 2 controls, partner with DevOps for secure defaults, and build automated AppSec scanning and tooling.

You will contribute to threat modeling for AI/LLM systems, deploy OSS security tools, and mentor teams on risk-aware decisions.

Qualifications

• 7+ years of hands-on security engineering experience across application, cloud, and network security.
• Experience deploying and running OSS security tools; familiar with PCI/SOC2/ISO controls.

Responsibilities

• Run security reviews for new tools, vendors, and projects—data handling, AI usage, DPAs, PII, authentication/authorization, and third-party security reports.
• Own access and infrastructure security—IAM least-privilege reviews, S3/database access controls, environment segregation, and network audits.
• Lead security incident response end to end—triage, investigate, contain, document, and build runbooks.
• Implement controls supporting PCI DSS and SOC 2/ISO 27001 programs, including audits and disaster recovery planning.
• Partner with DevOps/IT on patch management and secure infrastructure defaults; present risk to leadership.
• Build in-house AppSec scanning and automation—define SLAs and rollout tooling.

Skills

Security engineering

Cloud security

AppSec/Threat modelling

AWS security

Automation & scripting

Education

BS in Computer Science or related field

Tools

Burp Suite

OWASP ZAP

Nmap

Semgrep

Trivy

ELK/Kibana

HashiCorp Vault

Job description

Credit Sesame is seeking a Senior Security Engineer to lead security reviews, protect access controls, and drive incident response across cloud and on‑premises environments. You will implement PCI DSS and SOC 2 controls, partner with DevOps for secure defaults, and build automated AppSec scanning and tooling.

You will contribute to threat modeling for AI/LLM systems, deploy OSS security tools, and mentor teams on risk-aware decisions.