Senior Security Engineer - Remote Identity Platform Lead

Lumos; Oregon; Hybrid; USD 155,000 - 200,000; Full time

Benefits offered by this job

Remote-first culture

Medical, dental & vision insurance

Mental health support

Monthly wellness stipend

Life & disability insurance

Flexible PTO

Parental leave

Annual learning stipend

Company & team offsites

401(k) with matching

Job summary

Lumos is building an Autonomous Identity Platform used by leading tech companies. As a Senior Security Engineer, you will design security foundations and serve as a trusted voice for customers on safety and risk mitigation.

You’ll lead security projects, perform architecture reviews, and help implement least-privilege access across production systems while collaborating with multiple teams and stakeholders to protect customer data.

Qualifications

• 5+ years of software engineering with at least 3 in security.
• Proven production security systems design, shipping, and operation.
• Strong backend skills; Python and TypeScript are a plus; Go is welcome.
• Clear written communication to engineers, PMs, and customers.
• Experience with AWS IAM, cloud security, and IaC practices.

Responsibilities

• Design and ship core security platform systems in Lumos codebase.
• Lead multi-sprint security projects end to end with engineers from other teams.
• Run security architecture reviews and threat models for new products.
• Drive least-privilege access to production systems (databases, pipelines, IAM).
• Triage, fix vulnerabilities from pentests and scans and coordinate retests.
• Participate in security on-call and respond to customer inquiries.

Skills

Python

TypeScript

Go

AWS

IAM

Tools

Security architecture

Threat modeling

Policy & access control

Job description

Lumos is building an Autonomous Identity Platform used by leading tech companies. As a Senior Security Engineer, you will design security foundations and serve as a trusted voice for customers on safety and risk mitigation.

You’ll lead security projects, perform architecture reviews, and help implement least-privilege access across production systems while collaborating with multiple teams and stakeholders to protect customer data.