Staff Security Engineer

Primerai; United States; Remote; USD 175,000 - 235,000; Full time

Benefits offered by this job

Remote work

Comprehensive benefits

401(k) with match

Wellness days

Fertility benefits

Mental health coverage

Fitness membership

Job summary

primerai is seeking a senior security engineer to own cloud security architecture, detection and response tooling, and the integration of security into IT and DevOps workflows. This role is ideal for someone who can drive a Zero Trust program forward while staying close to hands-on engineering work.

You will lead security across cloud environments, manage security tooling (EDR, IAM, WAF), conduct audits, respond to incidents, and embed security into DevSecOps practices, with a strong emphasis on

Qualifications

• 10+ years in security or cloud operations with strong written and oral communication.
• Hands-on AWS experience and cloud-native security controls such as IAM and WAF.
• Experience operating intrusion prevention systems and managing system logging plus SIEM technologies.
• Practical knowledge of vulnerability management tools, techniques, and remediation processes.
• Proven ability to embed security practices inside IT and DevOps environments, including automation.

Responsibilities

• Continuously analyze and improve the organization's security posture across cloud-based infrastructure, platforms, and applications.
• Conduct security assessments and audits of cloud environments, identifying and remediating vulnerabilities and misconfigurations.
• Manage and tune cloud-native security tools such as EDR, IAM, and WAF, and own the DAST and SAST solutions that feed the SDLC.
• Respond to security alerts, perform root cause analysis, and lead incident response from initial detection through final resolution.
• Broaden the Zero Trust framework in partnership with the IT team and integrate security practices into DevSecOps and the broader software development lifecycle.
• Automate security workflows to drive continuous compliance, and track emerging threats to recommend enhancements.

Skills

Cloud security

Incident response

Zero Trust

DevSecOps

Automation

Okta integration

Security architecture

Tools

AWS

IAM

WAF

EDR

SIEM

Python

Golang

Job description

Role overview

A senior security engineering role on a small, high-impact IT and Information Security team responsible for protecting decision-ready AI used by critical organizations. The position owns cloud security architecture, detection and response tooling, and the integration of security into both IT and DevOps workflows. It is ideal for someone who can drive a Zero Trust program forward while staying close to hands‑on engineering work.

Responsibilities

• Continuously analyze and improve the organization's security posture across cloud-based infrastructure, platforms, and applications.
• Conduct security assessments and audits of cloud environments, identifying and remediating vulnerabilities and misconfigurations.
• Manage and tune cloud-native security tools such as EDR, IAM, and WAF, and own the DAST and SAST solutions that feed the SDLC.
• Respond to security alerts, perform root cause analysis, and lead incident response from initial detection through final resolution.
• Broaden the Zero Trust framework in partnership with the IT team and integrate security practices into DevSecOps and the broader software development lifecycle.
• Automate security workflows to drive continuous compliance, and track emerging threats to recommend enhancements.

Requirements

• 10+ years of experience in security and/or cloud operations with strong written and oral communication skills.
• Hands-on experience with AWS and cloud-native security controls such as IAM and WAF.
• Direct experience operating intrusion prevention systems and managing system logging plus SIEM technologies.
• Practical knowledge of vulnerability management tools, techniques, and remediation processes, plus familiarity with incident response procedures.
• Proven ability to embed security practices inside IT and DevOps environments, including automation of security workflows.
• Experience integrating Okta as an identity provider into security processes and operations.

Nice to have

• Working knowledge of Python and Golang for security automation.
• Cloud security certifications such as AWS Certified Security - Specialty, Azure Security Engineer, or CCSP.

Benefits and work setup

• Annual cash compensation in the US $175,000-$235,000 range, with final figures based on experience and skills.
• Full medical, dental, and vision coverage, fertility benefits, mental health coverage, fitness membership, primary care access, 401(k), and remote work plus monthly internet stipends.
• Flexible vacation policy, Wellness Days, and 100% paid parental leave; offers may be conditioned on the ability to meet applicable U.S. government contract requirements.