Senior Security Engineer: Secure Cloud & DevSecOps Leader

Embedded Shishya; United States; Remote; USD 165,000 - 200,000; Full time

Benefits offered by this job

Travel stipend

Productivity stipend

AI tools stipend

Team lunch stipend

Home office stipend

Health insurance

Job summary

Roboflow, distributed across the US, is seeking a Senior Security Engineer to own security across the stack, from Kubernetes clusters to API design, tooling, and incident response. You will drive threat modeling, secure-by-default deployments, and remediation while enabling rapid development and CI/CD practices.

You’ll work with a security-first mindset in a startup environment, build tooling, and contribute to a culture of blameless postmortems and systemic security improvements.

Qualifications

• 6+ years of experience in software/infrastructure engineering with a focus on security.
• Deep obsession with security; write code to plug holes.
• Experience with Google Cloud (GCP), Kubernetes, and containerized environments.

Responsibilities

• Secure Kubernetes clusters, cloud SaaS integrations, and developer workflows.
• Define security vision for AI era against growing leverage.
• Build internal tooling and CI/CD automation to catch vulnerabilities before prod.
• Lead threat modeling sessions and secure code reviews.
• Harden authentication and access controls across surfaces.
• Proactively perform red teaming and remediation leadership.
• Own the Bug Bounty program and drive triage and fixes.
• Investigate vulnerabilities, lead incident response and pen testing.
• Translate security risks into actionable tasks for engineers.

Skills

Security-first mindset

Cloud expertise (GCP)

Kubernetes

Incident response

Threat modeling

Tools

GKE

Terraform

CI/CD tooling

Job description

Roboflow, distributed across the US, is seeking a Senior Security Engineer to own security across the stack, from Kubernetes clusters to API design, tooling, and incident response. You will drive threat modeling, secure-by-default deployments, and remediation while enabling rapid development and CI/CD practices.

You’ll work with a security-first mindset in a startup environment, build tooling, and contribute to a culture of blameless postmortems and systemic security improvements.