Senior Security Engineer — Identity Platform Security (Remote)

Lumos; United States; Remote; USD 155,000 - 200,000; Full time

Benefits offered by this job

Remote-friendly culture

Health insurance

Mental health resources

Wellness stipend

Parental leave

Learning stipend

Team offsites

401(k) with matching

Job summary

Lumos is seeking a Senior Security Engineer to build and secure the company’s Autonomous Identity Platform. You will shape security foundations used by major products, and be a trusted advisor on risk for customers and partners.

You will lead secure design, perform threat modeling, and drive least-privilege access across production systems, including AWS-based infrastructure, IAM, and data pipelines. This role blends hands-on engineering with security strategy.

Qualifications

• 5+ years of software engineering experience with a minimum of 3 years in security.
• Track record designing, shipping, and operating production security systems.
• Strong backend skills; Python and TypeScript are a plus; Go is welcome.
• Ability to explain risks and trade-offs to engineers, PMs, and customers.
• Hands-on threat modeling, secure design reviews, and vulnerability remediation.

Responsibilities

• Design and ship core security platform systems within the Lumos codebase.
• Lead multi-sprint security projects end-to-end across teams.
• Conduct security architecture reviews and threat models for new products.
• Drive least-privilege access across production systems and data stores.
• Triage and fix vulnerabilities from pentests, cloud assessments, and scans.
• Participate in security on-call and respond to incidents and customer inquiries.

Skills

Security engineering

Backend development

Python

TypeScript

Threat modeling

Security architecture

AWS security

Clear written communication

OAuth/OIDC/SAML

Tools

OAuth 2.0

OIDC

SAML

SCIM

OPA

AWS IAM

Job description

Lumos is seeking a Senior Security Engineer to build and secure the company’s Autonomous Identity Platform. You will shape security foundations used by major products, and be a trusted advisor on risk for customers and partners.

You will lead secure design, perform threat modeling, and drive least-privilege access across production systems, including AWS-based infrastructure, IAM, and data pipelines. This role blends hands-on engineering with security strategy.