Senior Security Software Engineer (Cloud & DevSecOps)

SPAN; United States; On-site; USD 140,000 - 210,000; Full time

Benefits offered by this job

Competitive compensation

Equity grants

Comprehensive benefits

Transit access

Team culture

Flexible hours

Unlimited PTO

Job summary

SPAN is seeking a hands-on, autonomous Sr. Software Engineer, Security to drive the technical execution of security initiatives across the platform and backend. You will architect, develop, and deploy security tools, frameworks, and infrastructure to protect SPAN’s systems.

You will lead automations for DevSecOps, triage vulnerabilities, and oversee AWS hardening while partnering with engineering teams on broader, structural fixes. Strong coding skills in Python, Java, or Node are required.

Qualifications

• 6+ years of dedicated experience in security engineering, application security, or DevSecOps.
• Understanding of authentication and authorization protocols (OIDC, SAML and OAuth).
• Expertise in securing, auditing, and hardening cloud ecosystems, especially AWS.
• Experience balancing vulnerability patching with strategic, framework-level remediation with development teams.
• Proficiency in production-grade coding in Python, Java, or Node.js.

Responsibilities

• Design and build automated security tooling and DevSecOps guardrails to empower developers without slowing velocity.
• Triage and remediate security vulnerabilities across the backend stack, patch CVEs, and collaborate on broader fixes.
• Lead hardening efforts for AWS production environments in line with industry standards and compliance.
• Conduct threat modeling and security architecture reviews for high-impact systems and new features.

Skills

Security engineering

Identity & Access Management

Cloud security

Vulnerability remediation

Backend programming

Job description

SPAN is seeking a hands-on, autonomous Sr. Software Engineer, Security to drive the technical execution of security initiatives across the platform and backend. You will architect, develop, and deploy security tools, frameworks, and infrastructure to protect SPAN’s systems.

You will lead automations for DevSecOps, triage vulnerabilities, and oversee AWS hardening while partnering with engineering teams on broader, structural fixes. Strong coding skills in Python, Java, or Node are required.