Senior Security Engineer — Cloud Security & Compliance

Seon; United States; Remote; USD 140,000 - 190,000; Full time

Job summary

SEON is seeking a Senior Security Engineer to strengthen our real-time fraud-prevention platform. You will build evidence pipelines across AWS, GitHub, CI/CD and identity tooling, automate access reviews, and enforce least privilege at scale.

You’ll lead ISO 27001, ISO 42001, SOC 2 and PCI DSS programs, coordinate audits, and translate regulatory requirements into engineering work. You will collaborate with platform and application security teams, drive threat modelling, incident response, and

Qualifications

• 5+ years in security engineering with hands-on AWS experience.
• Fluent in Terraform, Kubernetes and GitHub Actions.
• Python or similar language for automating evidence collection and alert enrichment.
• Experience leading ISO 27001 or SOC 2 programs and audit liaison.
• Clear written English for auditors, engineers and customers.

Responsibilities

• Build evidence pipelines against AWS, GitHub, CI/CD and identity tooling; automate controls.
• Automate access reviews across AWS IAM, Google Workspace, GitHub and core SaaS tools.
• Harden and remediate IAM at scale; enforce least privilege and short-lived identities.
• Ship Terraform and CI guardrails: secret scanning, policy checks, signed container images.
• Lead ISO 27001, ISO 42001, SOC 2 and PCI DSS programs; audit liaison.
• Maintain policies and risk registers; translate regulatory obligations into engineering work.

Skills

AWS security

Terraform

Kubernetes

GitHub Actions

Python

Incident response

Auditing & governance

Tools

Terraform

Kubernetes

GitHub Actions

Python

CloudTrail

GuardDuty

WAF

ISO 27001

SOC 2

PCI DSS

Job description

SEON is seeking a Senior Security Engineer to strengthen our real-time fraud-prevention platform. You will build evidence pipelines across AWS, GitHub, CI/CD and identity tooling, automate access reviews, and enforce least privilege at scale.

You’ll lead ISO 27001, ISO 42001, SOC 2 and PCI DSS programs, coordinate audits, and translate regulatory requirements into engineering work. You will collaborate with platform and application security teams, drive threat modelling, incident response, and