Senior Security Engineer — Zero-Trust & Cloud Safeguard

The Atlantic; Washington (District of Columbia); On-site; USD 115,000 - 140,000; Full time

Job summary

The Atlantic is seeking a Senior Security Engineer to design and implement security across our applications and services. You’ll work with engineering teams to ensure zero trust principles, data protection, and secure by design practices from the outset.

You will own security incidents end to end, help tune WAFs and IAM, and develop tooling to harden our platforms while maintaining reliability and performance. This is a hands-on role requiring collaboration across backend and DevOps teams.

Qualifications

• 5+ years of software engineering experience with hands-on security focus.
• Strong backend programming and DevOps experience (CI/CD, IaC, cloud platforms).
• Deep understanding of secure software design and zero trust principles.
• Hands-on IAM, WAFs, and secure data access controls.
• Experience owning security incidents end to end (triage, root cause, fixes).

Responsibilities

• Partner with engineering teams to architect applications with security and data protection built in from the start, including zero trust networking and secure data access controls.
• Review architecture diagrams, code, and proposals to spot security issues before they ship.
• Secure agentic and LLM-driven workflows to prevent over-access, data exfiltration, and backdoors.
• Work with Operations to stand up and tune WAFs and IAM.
• Develop tooling that makes it easier to secure our applications and company data.
• Triage security incidents, identify root causes, and build solutions that prevent recurrence.
• Participate in on-call rotation to monitor, troubleshoot, and resolve production incidents.

Skills

Security engineering

Backend development

DevOps

IAM

WAFs

Incident ownership

CI/CD

IaC

Cloud platforms

Tools

Datadog

Sentry

Job description

The Atlantic is seeking a Senior Security Engineer to design and implement security across our applications and services. You’ll work with engineering teams to ensure zero trust principles, data protection, and secure by design practices from the outset.

You will own security incidents end to end, help tune WAFs and IAM, and develop tooling to harden our platforms while maintaining reliability and performance. This is a hands-on role requiring collaboration across backend and DevOps teams.