Staff Software Engineer, App & Cloud Security — Onsite NY

WithCoverage; New York (NY); On-site; USD 200,000 - 275,000; Full time

Benefits offered by this job

Equity

Medical, dental, vision

Pre-tax accounts

401(k) provider

Flexible time off

In-office culture

Job summary

WithCoverage is hiring a Staff Software Engineer - App & Cloud Security for on-site work at our New York office. You will secure every layer of our stack—from products and production code to AWS infrastructure, AI systems, and corporate technology—while building security architecture at startup speed.

This hands-on role requires writing code, Terraform, guardrails, detections, and internal tools to fix problems at the source.

Qualifications

• 7+ years of experience securing software and infrastructure in production.
• Hands-on AWS security experience with IAM, networking, Linux, containers, infrastructure as code, CI/CD, secrets management.
• Experience preparing for SOC 2 or HIPAA is strongly preferred.

Responsibilities

• Establish and evolve cloud security across AWS account organization, IAM, networking, and inter-service communication.
• Develop and maintain Terraform-driven security architecture with reusable modules and guardrails.
• Create scalable identity solutions including workload identities, service accounts, and role-based access across environments.
• Automate security processes throughout CI/CD pipelines and cloud platforms.
• Oversee protection of production Kubernetes and container environments, including RBAC and runtime safeguards.
• Translate SOC 2/HIPAA requirements into technical controls and automate evidence collection.

Skills

AWS security

IAM & networking

Containers & Kubernetes

Infrastructure as Code

CI/CD security

Vulnerability management

Tools

Terraform

SOC 2 prep

Kubernetes

Job description

WithCoverage is hiring a Staff Software Engineer - App & Cloud Security for on-site work at our New York office. You will secure every layer of our stack—from products and production code to AWS infrastructure, AI systems, and corporate technology—while building security architecture at startup speed.

This hands-on role requires writing code, Terraform, guardrails, detections, and internal tools to fix problems at the source.