Senior Security Engineer – VC Backed Startups

Jobtailor; United States; On-site; USD 140,000 - 190,000; Full time

Job summary

Jobtailor is seeking an experienced security engineer to design and implement controls across applications and cloud infrastructure. You will conduct architecture reviews, threat modeling, and security assessments for new products, and prioritize remediation across the stack.

You will embed secure coding practices into the software lifecycle, develop tooling and automation, and collaborate with engineering to strengthen IAM, encryption, and network security.

Qualifications

• 5+ years of experience across security engineering, application security, cloud security, infrastructure security, or related disciplines.
• Strong software engineering or systems engineering foundation.
• Proficiency in languages such as Python, Go, Java, JavaScript, TypeScript, Rust, or Bash.
• Experience securing cloud-native applications and infrastructure on AWS, GCP, or Azure.
• Knowledge of common application and infrastructure vulnerabilities, attack techniques, and mitigation strategies.
• Experience with threat modeling, secure design reviews, penetration testing, or vulnerability research.
• Familiarity with identity and access management, secrets management, encryption, and network security.
• Experience building security automation and integrating controls into CI/CD pipelines.
• Ability to communicate technical risks and recommendations to engineering teams and business stakeholders.
• Strong judgment around risk prioritization, remediation, and balancing security with execution speed.
• Experience in venture-backed startups, security-sensitive industries, or rapidly scaling technology companies.

Responsibilities

• Design and implement security controls across applications, cloud infrastructure, internal systems, and development environments
• Conduct architecture reviews, threat modeling, code reviews, and security assessments for new products and features
• Identify, prioritize, and remediate vulnerabilities across the technology stack
• Embed security into the software development lifecycle through secure coding standards, automated testing, and developer tooling
• Build and improve detection, monitoring, incident response, and vulnerability management capabilities
• Partner with engineering and infrastructure teams to strengthen cloud, container, network, identity, and access security
• Lead or support the investigation and remediation of security incidents
• Develop reusable security tooling, automation, documentation, and technical guardrails
• Evaluate third-party technologies, integrations, and vendors for potential security risks
• Support customer security reviews, enterprise diligence, and technical compliance requirements
• Help establish security policies and controls aligned with frameworks such as SOC 2, ISO 27001, HIPAA, or PCI DSS
• Mentor engineers and promote shared ownership of security across the organization

Skills

Security Engineering

Application Security

Cloud Security

Vulnerability Management

Threat Modeling

Penetration Testing

Security Automation

Communication

Tools

AWS

GCP

Azure

CI/CD Pipelines

Secrets Management

Encryption

Job description

• Design and implement security controls across applications, cloud infrastructure, internal systems, and development environments
• Conduct architecture reviews, threat modeling, code reviews, and security assessments for new products and features
• Identify, prioritize, and remediate vulnerabilities across the technology stack
• Embed security into the software development lifecycle through secure coding standards, automated testing, and developer tooling
• Build and improve detection, monitoring, incident response, and vulnerability management capabilities
• Partner with engineering and infrastructure teams to strengthen cloud, container, network, identity, and access security
• Lead or support the investigation and remediation of security incidents
• Develop reusable security tooling, automation, documentation, and technical guardrails
• Evaluate third-party technologies, integrations, and vendors for potential security risks
• Support customer security reviews, enterprise diligence, and technical compliance requirements
• Help establish security policies and controls aligned with frameworks such as SOC 2, ISO 27001, HIPAA, or PCI DSS
• Mentor engineers and promote shared ownership of security across the organization

Requirements

• 5+ years of experience across security engineering, application security, cloud security, infrastructure security, or related disciplines
• Strong software engineering or systems engineering foundation
• Proficiency in languages such as Python, Go, Java, JavaScript, TypeScript, Rust, or Bash
• Experience securing cloud-native applications and infrastructure on AWS, GCP, or Azure
• Knowledge of common application and infrastructure vulnerabilities, attack techniques, and mitigation strategies
• Experience with threat modeling, secure design reviews, penetration testing, or vulnerability research
• Familiarity with identity and access management, secrets management, encryption, and network security
• Experience building security automation and integrating controls into CI/CD pipelines
• Ability to communicate technical risks and recommendations to engineering teams and business stakeholders
• Strong judgment around risk prioritization, remediation, and balancing security with execution speed
• Experience in venture-backed startups, security-sensitive industries, or rapidly scaling technology companies

Core Competencies

Demonstrates expertise in security engineering, application security, and cloud security, with a strong foundation in software engineering. Proficient in identifying vulnerabilities, implementing security controls, and integrating security practices into the software development lifecycle.

Highest-signal resume keywords

• Security Engineering
• Application Security
• Cloud Security
• Vulnerability Management
• Threat Modeling

ATS Optimization Keywords

Hard Skills

• Python
• Go
• Java
• JavaScript
• TypeScript
• Rust
• Bash
• Threat Modeling
• Penetration Testing
• Security Automation

Soft Skills

• Communication
• Judgment
• Mentoring

Certifications & Qualifications

• SOC 2
• ISO 27001
• HIPAA
• PCI DSS

Industry Keywords

• Security Controls
• Incident Response
• Risk Prioritization
• Security Policies
• Security Assessments

Tools & Technologies

• AWS
• GCP
• Azure
• CI/CD Pipelines
• Secrets Management
• Encryption