Senior Security Engineer — Zero-Trust & Secure by Design

Socket.dev; Washington (District of Columbia); On-site; USD 115,000 - 140,000; Full time

Job summary

The Atlantic is looking for a hands-on Senior Security Engineer to advance security across our applications and services, supporting journalism that informs the public.

You will configure, program, and integrate advanced security systems, partnering with engineering teams to build zero‑trust, data‑protective platforms while owning incidents end‑to‑end. This Guild role is based in Washington, DC, with on‑call duties and a salary range of $115,000–$140,000.

Qualifications

• 5+ years of software engineering experience with hands-on security engineering.
• Strong backend programming ability and DevOps experience (CI/CD, IaC, cloud platforms).
• Deep understanding of secure software design and zero trust principles.
• Hands-on experience with IAM, WAFs, and secure data access controls.
• Proven incident ownership from triage to durable fixes.
• Experience securing agentic and LLM-driven workflows.
• Experience building security tooling and automation.
• Familiarity with AWS, GCP or Azure and Terraform.
• Background in consumer-facing web or mobile products.
• Experience with observability tools like Datadog or Sentry.
• Familiarity with threat modeling and secure-by-design architecture.

Responsibilities

• Partner with engineers to architect security into applications from the start.
• Review diagrams, code and proposals to spot security issues before shipping.
• Secure agentic/LLM workflows to prevent over-access and exfiltration.
• Collaborate with Operations to deploy and tune WAFs and IAM.
• Develop tooling to simplify securing applications and data.
• Triage incidents, identify root causes, implement durable fixes.
• On-call rotation to monitor production incidents.
• Contribute to DevOps and backend engineering across architecture.
• Role may require night, early-morning, and weekend work.

Skills

Security engineering

Backend development

DevOps (CI/CD, IaC, cloud)

Zero trust security

IAM & WAF

Incident response

Threat modeling

Security tooling

LLM security considerations

Tools

Terraform

Job description

The Atlantic is looking for a hands-on Senior Security Engineer to advance security across our applications and services, supporting journalism that informs the public.

You will configure, program, and integrate advanced security systems, partnering with engineering teams to build zero‑trust, data‑protective platforms while owning incidents end‑to‑end. This Guild role is based in Washington, DC, with on‑call duties and a salary range of $115,000–$140,000.