Staff Security Software Engineer

Altana; New York (NY); Hybrid; USD 134,000 - 200,000; Full time

Job summary

Join a forward-thinking company that harnesses AI to enhance global commerce and security. In this role, you'll embed security into our infrastructure, ensuring the resilience of our systems. Collaborate with diverse teams to proactively manage vulnerabilities and automate security processes. With a focus on engineering excellence and societal impact, your contributions will help shape a trusted supply chain network. This opportunity offers a dynamic work environment, competitive salary, and top-tier benefits, making it an exciting place to advance your career.

Benefits

Flexible Time Off

Paid Parental Leave

Health Benefits

401(k) Savings

Commuter Benefits

Wellness Programs

Pet Insurance

Employee Assistance Program

Dependent Care FSA

Qualifications

• 5+ years in Operations, DevOps, or related roles.
• Expertise in application security and CI/CD platforms.
• Strong understanding of cloud security and vulnerability management.

Responsibilities

• Aggregate and assess vulnerability data from multiple tools.
• Collaborate with teams for timely vulnerability remediation.
• Implement automated security testing and monitoring solutions.

Skills

Operations

DevOps

DevSecOps

Application Security

Problem-Solving

Education

Bachelor’s degree in Computer Science

Advanced degree in a related field

Tools

GitHub Actions

Jenkins

Azure DevOps

Terraform

AWS

Docker

Kubernetes

SonarQube

Burp Suite

Job description

Brooklyn, NY; Washington, D.C.; San Francisco, CA

AI can be a powerful tool for good in the world – at Altana we apply AI to the world’s largest organized body of supply chain data to power a more resilient, more secure, and more sustainable model of global commerce. Our customers connect to the Altana network to build resilience for critical industries and infrastructure, automate and safeguard cross-border trade, transform insurance underwriting, protect national security, combat modern slave labor, disrupt fentanyl trafficking, and ensure that their products are sustainable.

Altana is backed by leading investors and used by the world’s most important organizations, including Lloyd’s, Maersk, multiple government agencies across the US, UK, EU, Singapore, and Australia, General Atomics, Boston Scientific, and more. We are building a global platform connecting the public and private sectors into an AI-powered network for building trusted supply chains. We operate in accordance with our values : we focus on value creation, not capture; we foster diversity and embrace difference; we embrace reality; we get things done; we amaze our clients. When you join Altana, you’ll be joining a vibrant, collaborative team working together to solve complex problems with the potential for global societal impact.

The Opportunity at Altana

At Altana, we believe great engineering drives reliable and secure systems. We're looking for someone excited about embedding security deeply into our infrastructure and supporting processes, which run on modern technologies like containers, cloud services, and automated pipelines. You'll be instrumental in building tools and processes that proactively keep our systems secure and free from vulnerabilities. This role combines technical leadership, creativity, and collaboration across DevOps, security, and software development teams to ensure our technology stack remains resilient and trusted.

You'll play a key role in developing and implementing a robust security posture within our DevOps team, with a strong emphasis on proactive risk reduction. This includes establishing and refining processes for identifying and remediating vulnerabilities, deploying security tooling, and leveraging automation within our pipelines to maximize efficiency. You'll collaborate closely with Information Security and Development teams to integrate security practices throughout the development lifecycle. Success will be measured by the overall strength and effectiveness of our security posture, the timely and efficient resolution of vulnerabilities, and enabling our engineering teams to deliver secure and reliable products.

Your Responsibilities

Assessment & Reporting

• Aggregate and assess vulnerability data from multiple scanning tools and sources.
• Quickly triage vulnerabilities; accurately assessing their risk and impact, and clearly documenting findings.
• Define effective remediation actions and collaborate directly with relevant teams to initiate timely fixes.
• Act as the primary contact for security compliance engagements and audits across the business.
• Develop, publish, and maintain clear metrics and reports that demonstrate the effectiveness and progress of our vulnerability management program.

Remediation:

• Collaborate with engineering and security teams to prioritize and facilitate timely vulnerability remediation.
• Provide actionable guidance on code-level fixes, configuration improvements, and secure coding best practices.
• Drive improvements in vulnerability management processes through ongoing collaboration and feedback.

Automation:

• Implement automated security testing and monitoring solutions to continuously identify new risks.
• Develop automation to prioritize vulnerabilities based on severity, exploitability, and impact.
• Automate patch management, dependency updates, and configuration management to quickly resolve vulnerabilities.
• Create automated remediation workflows to address common security issues and reduce manual effort.
• Collaborate closely with Cloud Engineering and DevOps teams to embed automated security controls into deployment processes.
• Generate automated reports and dashboards to communicate security posture and remediation progress.
• Regularly evaluate and enhance automation practices, tooling configurations, and control efficacy.

About You

• Bachelor’s degree in Computer Science, Engineering, or a related field; advanced degree preferred.
• 5+ years of experience in Operations, DevOps, DevSecOps, or related engineering roles.
• Expertise in building out application security pipelines and CI/CD platforms using tools such as GitHub Actions, Jenkins, and/or Azure DevOps.
• Proficiency in programming/scripting languages like Python or Go.
• Hands-on experience with IaC tools (Terraform, OpenTofu, CloudFormation) and cloud platforms (AWS, Azure).
• Strong understanding of application security, container security (Docker, Kubernetes), and cloud security (AWS or Azure) .
• Knowledge of modern software delivery paradigms, including microservices and serverless architectures.
• Familiarity with security frameworks and standards (OWASP, NIST, CIS).
• Exceptional problem-solving skills, communication, and ability to work in a fast-paced environment.
• Experience with SAST/DAST tools like SonarQube or Burp Suite.

This role can be based in New York City, Washington D.C., or the San Francisco Bay Area with an expectation of hybrid work or occasional travel as needed.

US Salary Range and Benefits

$134,000 - $200,000 USD

The salary range, to the extent specified for this role, is a good faith statement of the minimum and maximum levels of the annual based salary for the position. The base salary offered to a successful candidate will depend on a wide range of compensation factors, including, but not limited to, work experience, education and/or training, critical skills, and/or business considerations. Competitive equity grants are included in the majority of full time offers; and are considered part of Altana's total compensation package. Altana also offers either a discretionary bonus or a variable compensation plan depending on the role. Additionally, Altana offers top-tier benefits for full-time employees, including:

• Flexible Time Off: Altana operates with a Flexible Time Off (FTO) policy that gives you agency over your own time off so you can maximize your work-life balance.
• Parental Leave: We offer industry leading Paid Parental Leave (PPL), providing 14 weeks of leave for non-birthing, adoptive, and foster parents and up to 26 weeks of leave for birthing parents, all paid at 100% of your base salary.
• Health Benefits: We have a full suite of medical, vision, and dental benefits with generous employer contributions, designed to give you flexibility and choice for your individual health situation. Our high deductible health plan is 100% employer paid for employees and supplemented with an employer contribution to your Health Savings Account (HSA). There is also a Flexible Spending Account (FSA) option.
• Supplemental Benefits: Altana provides life, short- and long-term disability, and AD&D insurance coverage, all at no cost to you, so you know that you and your loved ones are covered in case of an emergency.
• 401(k) Savings: Save for and invest in your future using our Guideline 401(k) retirement savings program.
• Commuter Benefits: Save money on your commute by setting aside pre-tax funds for public transit or parking!
• Wellness: Because we value mental and emotional health, every Altana employee has access to a free premium subscription to Calm, the #1 app for meditation, sleep, and mindfulness.
• Pet Insurance: Pets are family too! Keep them healthy with Wishbone insurance and / or our Total Pet vet service and telehealth discount plan.
• Employee Assistance Program: Free access to confidential personal support.
• Dependent Care FSA: You will have access to a Dependent Care FSA, which allows you to set aside pre-tax funds for childcare expenses

The recruiter assigned to this role can share more information about the specific compensation and benefit details associated with this role during the hiring process.

Why it’s great to work at Altana

• We love to collaborate, and we win as a team!
• We are committed to engineering excellence
• We value personal and professional development
• We learn from diverse backgrounds and perspectives
• We impact the world, from enabling developing countries to identifying drug traffickers

At Altana, we believe that a diverse workforce enables greater creativity, performance, and adaptability. We’re proud to be an equal opportunity employer and welcome you to join us as you are. Our employment opportunities and decisions are based on business needs and individual qualifications, without regard to race, color, religious creed, national origin, ancestry, age, physical or mental disability, medical condition, marital status, sexual orientation, gender identity or expression, genetic information, family care or medical leave status, military or veteran status, or any other characteristic protected by the laws or regulations in the areas in which we operate. We prohibit discrimination and harassment of any type, in any situation.

Offers related to employment at Altana will come from an Altana.ai email address. We will never ask for payment as part of the interview or onboarding process.

Apply for this job

*

indicates a required field

First Name *

Last Name *

Email *

Phone *

Resume/CV *

Enter manually

Accepted file types: pdf, doc, docx, txt, rtf

Enter manually

Accepted file types: pdf, doc, docx, txt, rtf

LinkedIn Profile *

Are you authorized to work in the United States? * Select...

Will you now or in the future require sponsorship for employment visa status? * Select...

Do you live within a commutable distance from one of our US hub locations (NY, SF, DC)? * Select...