Staff Security Engineer

AIRAS Cloud; United States; Remote; USD 150,000 - 230,000; Full time

Job summary

AIRAS Cloud is seeking a senior security leader to own and strengthen governance for a SaaS platform. You will drive secure design, threat modeling, and enterprise assurance work to protect identities, tenants, secrets, data, and logs across the stack.

Based in Ireland with remote work in European time zones, you will build detection, logging, incident readiness, and release controls, aligning with industry assurance standards and transparent public claims.

Qualifications

• At least 8 years in application or cloud security engineering for SaaS products.
• Hands-on experience with enterprise identity, RBAC, encryption, and key/secret management.
• Experience supporting security due diligence for customers in regulated industries.

Responsibilities

• Lead threat modeling and secure design reviews for the control plane and its integrations.
• Run the security evidence program and prepare responses to enterprise security questionnaires.
• Improve detection and logging, and strengthen incident response readiness.
• Establish controlled release practices and progress toward recognized assurance standards with accurate public claims.

Skills

Threat modeling

Secure design reviews

Security evidence program

Detection & logging

Incident readiness

Release controls

Assurance standards

Identity & encryption

Job description

Role overview

Own and strengthen security for a SaaS platform where customer trust depends on reliable governance evidence and protection of identity, tenant boundaries, secrets, data, and logs. The role combines secure design leadership with enterprise assurance work, detection, and incident readiness. The position is listed as remote within European time zones, based in Ireland.

Responsibilities

• Lead threat modeling and secure design reviews for the control plane and its integrations.
• Run the security evidence program and prepare responses to enterprise security questionnaires.
• Improve detection and logging, and strengthen incident response readiness.
• Establish controlled release practices and progress toward recognized assurance standards with accurate public claims.

Requirements

• At least 8 years in application or cloud security engineering for SaaS products.
• Hands-on experience with enterprise identity, role-based access control, encryption, and key and secret management.
• Experience supporting security due diligence for customers in regulated industries.

Nice to have

• Familiarity with OWASP guidance for generative AI and AI-specific threat modeling.