Senior Security Software Engineer - Remote (AWS & CI/CD)

Pinterest; San Francisco (CA); Hybrid; USD 156,000 - 320,000; Full time

Job summary

Pinterest is seeking a Senior Security Software Engineer to provide technical leadership in Security Operations and to own foundational platforms for governing cloud infrastructure, vulnerability remediation, and security reviews within engineering workflows.

The role combines hands‑on software and infrastructure engineering with architectural ownership, cross‑functional influence, and accountability for security‑critical capabilities across AWS, CI/CD and the software lifecycle.

Qualifications

• Experience designing and operating complex production security systems.
• Strong AWS security architecture and Terraform/IaC expertise.
• Experience with cloud governance, CI/CD security and vulnerability management.
• Proven ownership of cross‑functional security initiatives.
• Solid software engineering judgment across system design and reliability.
• Ability to influence decisions and mentor teams, responsibly using AI.

Responsibilities

• Own architecture and technical direction of Security Operations systems.
• Design and build production services, IaC, and policy‑as‑code for cloud resources.
• Develop guardrails for identity, changes, configuration and CI/CD security.
• Improve vulnerability triage and remediation processes with automation.
• Lead cross‑functional initiatives from design to operational maturity.
• Set engineering standards and guide partner teams; apply AI responsibly.

Skills

AWS security

Terraform

CI/CD security

Security automation

Cloud governance

Education

Bachelor's in CS/Engineering

Tools

Infrastructure as code

Job description

Pinterest is seeking a Senior Security Software Engineer to provide technical leadership in Security Operations and to own foundational platforms for governing cloud infrastructure, vulnerability remediation, and security reviews within engineering workflows.

The role combines hands‑on software and infrastructure engineering with architectural ownership, cross‑functional influence, and accountability for security‑critical capabilities across AWS, CI/CD and the software lifecycle.