Senior Security Engineer: Terraform & AWS Defense Lead

Taptap Send; New York (NY); In loco; USD 170.000 - 235.000; Tempo pieno

Descrizione del lavoro

Taptap Send is seeking a Senior Engineer, Security to join our Platform Engineering team. This is a find-and-fix role handling vulnerabilities, writing Terraform or code fixes, and driving remediation with the CISO.

You will own AWS security, threat modelling, penetration testing, and incident response, collaborating with security and engineering teams to raise the bar for cloud and application security.

Competenze

• Five or more years in hands‑on security engineering with production systems.
• You write and ship code. Terraform and Python, and enough application fluency to fix what you find rather than hand it off.
• Deep AWS security experience, including IAM and least privilege at organization scale, and container workloads in ECS or EKS.
• Application security, including threat modelling and hands‑on offensive testing against cloud and application targets.
• Security incident response, including forensic investigation.
• You have run vulnerability management and driven fixes through teams you do not manage; you work the finding queue on your own initiative, without being chased.
• You have worked in a regulated environment and turned ISO 27001, PCI DSS, or SOC 2 requirements into engineering work.
• Detection engineering in Datadog, or a comparable SIEM.
• Securing CI/CD pipelines, particularly GitHub Actions.
• Cryptography and secrets management in practice, including key rotation and certificate lifecycle.
• Using AI coding tools to remediate at scale, and reviewing AI-generated code with a security eye
• Experience with payments, cards, or digital assets.

Mansioni

• Remediate security findings across infrastructure, writing Terraform and application changes that close them.
• Own AWS security: IAM, least privilege, network boundaries, secrets management, and logging coverage; define baselines and enforce as code.
• Find problems before anyone else: perform regular penetration testing and threat modelling for new services early.
• Respond when it matters: act as technical lead for security incidents, including forensic investigation and improving detection in Datadog.

Conoscenze

Security engineering

Terraform

Python

AWS security

Threat modelling

Vulnerability management

Incident response

ISO 27001/PCI DSS/SOC 2

Datadog/SIEM

CI/CD security (GitHub Actions)

Cryptography & secrets

AI-assisted remediation

Payments/digital assets

Strumenti

Datadog

GitHub Actions

Snyk

Prowler

ASV

Descrizione del lavoro

Taptap Send is seeking a Senior Engineer, Security to join our Platform Engineering team. This is a find-and-fix role handling vulnerabilities, writing Terraform or code fixes, and driving remediation with the CISO.

You will own AWS security, threat modelling, penetration testing, and incident response, collaborating with security and engineering teams to raise the bar for cloud and application security.