Staff Security Engineer

Aurora; Pittsburgh (Allegheny County); On-site; USD 171,000 - 247,000; Full time

Benefits offered by this job

Annual bonus

Equity compensation

Comprehensive benefits

Job summary

Aurora is seeking a Staff Security Engineer to join its Enterprise Security Engineering team. The role involves owning architecture and implementation of security controls and building security telemetry infrastructure.

Qualified candidates should have over 12 years of enterprise security experience, proficiency in relevant programming languages, and a track record of leading cross-functional security projects. The position offers a competitive salary range of $171,000 - $247,000 per year, along with bonuses and benefits.

Qualifications

• 12+ years of hands-on experience in enterprise security engineering.
• Proficiency in programming languages such as Go or Python.
• Experience with enterprise security platforms and integrations.

Responsibilities

• Own the architecture and implementation of enterprise security controls.
• Design and build security telemetry and detection infrastructure.
• Translate security strategy into executable engineering projects.

Skills

Enterprise security engineering

Programming skills (Go, Python)

Security architecture reviews

Cross-functional project leadership

Security telemetry pipelines

Job description

Staff Security Engineer

We are looking for a deeply technical enterprise security engineer to join our Enterprise Security Engineering team, reporting to the Technical Lead Manager of Security Engineering.

Responsibilities

• Own the architecture and implementation of Aurora's enterprise security controls — designing systems and integrations that protect endpoints, identities, internal infrastructure, and SaaS environment.
• Design and build Aurora's security telemetry and detection infrastructure, including log pipelines, SIEM integrations, and alerting frameworks in partnership with the Security Operations Engineer.
• Define and enforce enterprise security standards, conducting architecture and design reviews to ensure alignment with Aurora's security posture and risk tolerance.
• Partner with IT, Infrastructure, and Engineering teams to embed security requirements early, shifting left on corporate IT initiatives before they become technical debt.
• Build automation and tooling that extends the capabilities of Aurora's security platforms, reduces manual operational burden, and scales the team's impact.
• Serve as the escalation point for enterprise security incidents requiring engineering-level investigation or remediation, and participate in the team's on-call rotation.
• Translate security strategy into concrete, executable engineering projects with clear milestones and measurable outcomes.

Required Qualifications

• 12+ years of hands‑on experience in enterprise security engineering or corporate information security — specifically securing employee‑facing systems, endpoints, identities, and internal infrastructure.
• Proficiency in at least one programming language used in a security context (e.g., Go, Python).
• Experience architecting and integrating enterprise security platforms — designing API integrations, automating workflows, and building tooling across domains such as EDR/XDR, MDM, IAM/IGA, DLP, SaaS security, cloud security, or PKI.
• Experience designing and building security telemetry pipelines and detection infrastructure — log ingestion, normalization, SIEM integration, and alerting architecture.
• Experience leading cross‑functional security engineering projects — defining scope, driving execution, and aligning stakeholders across Engineering and IT.
• Track record of conducting security architecture reviews and translating findings into actionable, risk‑prioritized remediation plans.
• Experience evaluating security posture and identifying systemic gaps, with a bias toward building durable solutions rather than one‑off fixes.

Desirable Qualifications

• Experience with Zero Trust architecture and identity‑centric security models.
• Familiarity with NIST CSF, MITRE ATT&CK, and CIS Benchmarks as engineering inputs.
• Hands‑on AWS security experience (SCPs, GuardDuty, Security Hub, IAM) and integration of cloud security signals into a corporate platform.
• Experience with applied cryptography and PKI in a production enterprise environment.
• Familiarity with securing AI/ML platforms or applications built on LLMs, RAG pipelines, or MCP‑based architectures.
• Security certifications such as CISSP, GCED, GREM, or similar (valued but not required).

The base salary range for this position is $171,000 - $247,000 per year. The successful candidate will also be eligible for an annual bonus, equity compensation, and benefits.

Our Commitment to Inclusion

Aurora considers candidates without regard to race, color, religion, national origin, age, sex, gender, gender identity, gender expression, sexual orientation, marital status, pregnancy status, parent or caregiver status, ancestry, political affiliation, veteran and/or military status, physical or mental disability, or any other status protected by federal or state law. We provide reasonable accommodations for qualified individuals with disabilities and disabled veterans.

For California applicants, information collected and processed as part of your application and any job applications you choose to submit is subject to Aurora’s California Employment Privacy Policy.