Senior Security Engineer - Cloud & DevSecOps Architect

Jobtailor; United States; On-site; USD 140,000 - 190,000; Full time

Job summary

Jobtailor is seeking an experienced security engineer to design and implement controls across applications and cloud infrastructure. You will conduct architecture reviews, threat modeling, and security assessments for new products, and prioritize remediation across the stack.

You will embed secure coding practices into the software lifecycle, develop tooling and automation, and collaborate with engineering to strengthen IAM, encryption, and network security.

Qualifications

• 5+ years of experience across security engineering, application security, cloud security, infrastructure security, or related disciplines.
• Strong software engineering or systems engineering foundation.
• Proficiency in languages such as Python, Go, Java, JavaScript, TypeScript, Rust, or Bash.
• Experience securing cloud-native applications and infrastructure on AWS, GCP, or Azure.
• Knowledge of common application and infrastructure vulnerabilities, attack techniques, and mitigation strategies.
• Experience with threat modeling, secure design reviews, penetration testing, or vulnerability research.
• Familiarity with identity and access management, secrets management, encryption, and network security.
• Experience building security automation and integrating controls into CI/CD pipelines.
• Ability to communicate technical risks and recommendations to engineering teams and business stakeholders.
• Strong judgment around risk prioritization, remediation, and balancing security with execution speed.
• Experience in venture-backed startups, security-sensitive industries, or rapidly scaling technology companies.

Responsibilities

• Design and implement security controls across applications, cloud infrastructure, internal systems, and development environments
• Conduct architecture reviews, threat modeling, code reviews, and security assessments for new products and features
• Identify, prioritize, and remediate vulnerabilities across the technology stack
• Embed security into the software development lifecycle through secure coding standards, automated testing, and developer tooling
• Build and improve detection, monitoring, incident response, and vulnerability management capabilities
• Partner with engineering and infrastructure teams to strengthen cloud, container, network, identity, and access security
• Lead or support the investigation and remediation of security incidents
• Develop reusable security tooling, automation, documentation, and technical guardrails
• Evaluate third-party technologies, integrations, and vendors for potential security risks
• Support customer security reviews, enterprise diligence, and technical compliance requirements
• Help establish security policies and controls aligned with frameworks such as SOC 2, ISO 27001, HIPAA, or PCI DSS
• Mentor engineers and promote shared ownership of security across the organization

Skills

Security Engineering

Application Security

Cloud Security

Vulnerability Management

Threat Modeling

Penetration Testing

Security Automation

Communication

Tools

AWS

GCP

Azure

CI/CD Pipelines

Secrets Management

Encryption

Job description

Jobtailor is seeking an experienced security engineer to design and implement controls across applications and cloud infrastructure. You will conduct architecture reviews, threat modeling, and security assessments for new products, and prioritize remediation across the stack.

You will embed secure coding practices into the software lifecycle, develop tooling and automation, and collaborate with engineering to strengthen IAM, encryption, and network security.