Sr. Software Engineer, Security

SPAN; United States; On-site; USD 140,000 - 210,000; Full time

Benefits offered by this job

Competitive compensation

Equity grants

Comprehensive benefits

Transit access

Team culture

Flexible hours

Unlimited PTO

Job summary

SPAN is seeking a hands-on, autonomous Sr. Software Engineer, Security to drive the technical execution of security initiatives across the platform and backend. You will architect, develop, and deploy security tools, frameworks, and infrastructure to protect SPAN’s systems.

You will lead automations for DevSecOps, triage vulnerabilities, and oversee AWS hardening while partnering with engineering teams on broader, structural fixes. Strong coding skills in Python, Java, or Node are required.

Qualifications

• 6+ years of dedicated experience in security engineering, application security, or DevSecOps.
• Understanding of authentication and authorization protocols (OIDC, SAML and OAuth).
• Expertise in securing, auditing, and hardening cloud ecosystems, especially AWS.
• Experience balancing vulnerability patching with strategic, framework-level remediation with development teams.
• Proficiency in production-grade coding in Python, Java, or Node.js.

Responsibilities

• Design and build automated security tooling and DevSecOps guardrails to empower developers without slowing velocity.
• Triage and remediate security vulnerabilities across the backend stack, patch CVEs, and collaborate on broader fixes.
• Lead hardening efforts for AWS production environments in line with industry standards and compliance.
• Conduct threat modeling and security architecture reviews for high-impact systems and new features.

Skills

Security engineering

Identity & Access Management

Cloud security

Vulnerability remediation

Backend programming

Job description

Our Mission

SPAN is enabling electrification for all

SPAN is mission-driven to design, build, and deploy products that electrify our built environment, decarbonize our world, and slow the effects of climate change.

• Decarbonizationis the process to reduce or remove greenhouse gas emissions, especially carbon dioxide, from entering our atmosphere.

• Electrificationis the process of replacing fossil fuel appliances that run on gas or oil with all-electric upgrades for a cleaner way to power our lives.

At SPAN, we believe in:

• Enabling homes and vehicles powered by clean energy

• Making electrification upgrades possible

• Building more resilient homes with reliable backup

• Designing a flexible and distributed electrical grid

The Role

SPAN is seeking a hands-on, autonomous Sr. Software Engineer, Security. In this role, you will drive the technical execution of SPAN’s software security initiatives. You will architect, develop, and deploy the foundational security tools, frameworks, and infrastructure required to protect SPAN's platform and backend ecosystem.

Key Responsibilities:

• Foundational Tooling & DevSecOps: Design and build automated security tools, paving the way for self-service security guardrails that empower developers without sacrificing velocity.

• Vulnerability Remediation: Drive the triage and resolution of security vulnerabilities across our backend stack—directly writing code to patch CVEs yourself when needed, while partnering with engineering teams to architect broader, deeper structural fixes.

• Cloud Security Hardening: Serve as the technical lead for hardening our AWS production environments, ensuring top-tier alignment with modern industry standards and compliance.

• Threat Modeling & Risk Mitigation: Conduct deep-dive threat modeling and security architecture reviews for high-impact, complex systems and net-new platform features.

About you

• Experience: 6+ years of dedicated experience in security engineering, application security, or DevSecOps

• Identity & Access Management: Understanding of authentication and authorization protocols (OIDC, SAML and OAuth).

• Cloud Infrastructure: Expertise in securing, auditing, and hardening cloud ecosystems, with a strong emphasis on AWS environments.

• Vulnerability Resolution: Experience balancing tactical, fast-paced vulnerability patching with strategic, framework-level remediation alongside development teams.

• Software Engineering Roots: Proficient in writing production-grade code in at least one of our core backend languages: Python, Java or Node.

Life at SPAN

Headquartered in San Francisco’s vibrant SoMa neighborhood, we are an eclectic group of creative thinkers who value open communication, teamwork, and a ‘make it happen’ approach to addressing complex challenges.

SPAN embraces diversity and equal opportunity in a serious way.

We are committed to building a team that represents a variety of backgrounds, perspectives, and skills.

We’re hiring talented individuals who are driven by success and are passionate about shaping the future of renewable energy. If that sounds like you, we’d love for you to consider joining the rapidly growing team at SPAN.

Perks:

• Competitive compensation + equity grants at a well-funded, venture-backed company
• Comprehensive benefits: 100% employee premiums for base plans on medical, dental, vision with options for additional coverage. Parental leave up to six (6) months depending on eligibility
• Comfortable, sunny office space located near BART and Caltrain public transit
• Strong focus on team building and company culture: Employee Resource Groups, monthly social events, SPANcakes recognition breakfast, lunch and learns
• Flexible hours, one holiday per month and unlimited PTO