Senior Security Engineer - Remote Identity & Access

Lumos App Inc.; United States; Remote; USD 155,000 - 200,000; Full time

Benefits offered by this job

Remote-first culture

Wellness stipend

Parental leave

Learning stipend

401(k) matching

Job summary

Lumos, the autonomous identity platform, is hiring a Senior Security Engineer to shape secure foundations across our product suite. You will own authentication/authorization, token management, and access controls, partnering with multiple teams to deliver secure solutions at scale.

Your work will include leading multi-sprint security initiatives, conducting threat modeling, and enforcing least-privilege access across production environments.

Qualifications

• 5+ years of software engineering experience, with at least 3 focused on security (application, product, or platform security).
• Strong backend skills; Python and TypeScript are a strong plus. Go is welcome.
• Clear written communication capable of explaining risk and trade-offs to engineers, PMs, and customers.

Responsibilities

• Design and ship core security platform systems within the Lumos codebase (e.g., authentication/authorization, token management, and access control).
• Lead multi-sprint security projects end-to-end, coordinating with engineers across teams.
• Conduct security architecture reviews and threat modeling for new products before scale, turning findings into prioritized work.
• Drive least-privilege access to production systems (databases, data pipelines, IAM, secrets).
• Triage, route, and fix vulnerabilities from pentests and cloud assessments; coordinate retests.

Skills

Software engineering

Backend development

Security engineering

Python

TypeScript

Go

Clear communication

Threat modeling

Tools

AWS

Job description

Lumos, the autonomous identity platform, is hiring a Senior Security Engineer to shape secure foundations across our product suite. You will own authentication/authorization, token management, and access controls, partnering with multiple teams to deliver secure solutions at scale.

Your work will include leading multi-sprint security initiatives, conducting threat modeling, and enforcing least-privilege access across production environments.