Staff Security Engineer: Secure AI Platform & Cloud

ScOp Venture Capital LLC.; New York (NY); Hybrid; USD 200,000 - 230,000; Full time

Job summary

Rogo is hiring a Staff Security Engineer to strengthen security across products, apps, and cloud environments. You will drive secure-by-default backend design, tooling, and guardrails, enabling the engineering team while maintaining velocity.

You will perform threat modeling, dynamic reviews, and automated security checks, partnering with developers to embed security into CI/CD and the software development lifecycle. Strong backend security experience and cloud/Kubernetes security are essential.

Qualifications

• Backend security engineer with experience embedding security into the SDLC.
• Experience with threat modeling and security reviews for backend services.
• Proficiency in one or more strongly typed languages (Rust, Java, C++).
• Familiarity with security tools like Burp, ZAP, and Snyk.

Responsibilities

• Design, build, and maintain secure backend features and services across the platform.
• Implement automated security reviews within the SDLC and CI/CD pipelines.
• Perform dynamic reviews, threat modeling, and penetration testing of applications and APIs.
• Remediate vulnerabilities from SAST/DAST/IaC findings and guardrails.
• Guide engineering teams on secure coding practices and guardrails.

Skills

Backend security

Threat modeling

Security automation

Penetration testing

Secure SDLC

Cloud security

Kubernetes security

CI/CD security

Rust/Java/C++

Secure coding

Education

Bachelor's degree in CS/Engineering

Tools

Burp

OWASP ZAP

Snyk

Terraform

Kubernetes security tooling

Job description

Rogo is hiring a Staff Security Engineer to strengthen security across products, apps, and cloud environments. You will drive secure-by-default backend design, tooling, and guardrails, enabling the engineering team while maintaining velocity.

You will perform threat modeling, dynamic reviews, and automated security checks, partnering with developers to embed security into CI/CD and the software development lifecycle. Strong backend security experience and cloud/Kubernetes security are essential.