Source Job

5w PTO

  • Own security across threat modelling, design review, and security testing of a multi-tenant cloud platform.
  • Prepare and maintain technical evidence for ISO 27001 and SOC 2 audits and customer reviews.
  • Collaborate daily with engineers and the CTO, reporting to the COO as the first dedicated security engineer.

Cloud Security Application Security Kubernetes Threat Modeling ISO 27001

20 jobs similar to Senior Security Engineer

Jobs ranked by similarity.

North America

  • Partner with Fortune 500 customers to address security concerns and accelerate platform adoption.
  • Develop security reference architectures and perform threat modeling for ServiceNow products and AI services.
  • Lead security deep dives covering cloud-native architectures, identity, encryption, and AI security controls.

ServiceNow is an AI platform that helps enterprises automate workflows and reinvent business processes. The company serves 85% of the Fortune 500 and fosters an AI-native culture where technology and talent work together.

UK EU 5w PTO

  • Work on client consulting projects to design and implement cloud native security architectures across AWS, GCP, and Azure.
  • Contribute to internal labs and open source projects, with a focus on threat modelling, supply chain security, and DevSecOps practices.
  • Collaborate with a team of SANS authors and engineers to deliver pragmatic security solutions for highly regulated industries.

ControlPlane is a London-based consultancy specialising in cloud-native, Kubernetes, and open source solutions, helping organisations secure complex cloud infrastructures with secure-by-design principles. As a successful start-up, we are a dynamic, cutting-edge, and passionate team that values employee wellbeing, progression, and open source community engagement.

North America

  • Lead hands-on security assessments for cloud, application, and infrastructure environments.
  • Manage technical projects end-to-end and deliver practical security solutions.
  • Work directly with clients and engineering teams to communicate findings and drive improvements.

Jobgether is an AI-powered job platform that matches candidates with hiring companies using objective review processes. It supports fully remote recruitment and emphasizes autonomy, technical excellence, and human-led final hiring decisions.

$150,000–$180,000/yr
US 20w maternity 12w paternity

  • Lead security architecture across cloud, platform, and AI systems.
  • Drive threat modeling, vulnerability management, and incident response.
  • Embed automated security testing into CI/CD and infrastructure-as-code.

Axios is a respected media company delivering trustworthy, award-winning news in an audience-first format known as Smart Brevity. The company fosters an open, inclusive culture, invests in AI literacy, and supports employees with flexibility and development stipends.

  • Architect and build multi-cloud security controls, including VPC segmentation and IAM policy design.
  • Build policy-as-code and IaC security guardrails integrated into CI/CD for pre-merge and pre-deploy gates.
  • Own vulnerability management and act as technical escalation point for incidents, leading forensics and remediation.

Coupa provides a community-generated AI and total spend management platform for businesses. The company has a global network of 10M+ buyers and suppliers and fosters a collaborative, transparent culture.

Australia

  • Lead technical implementations and architectural guidance for cloud security solutions.
  • Deploy Cloud Security Posture Management and Cloud Workload Protection capabilities.
  • Collaborate with customers to accelerate adoption and deliver measurable security outcomes.

This consulting company helps enterprise clients strengthen their cloud security posture and protect critical workloads. They offer a dynamic, customer-facing environment with opportunities for professional development and training.

$180,000–$230,000/yr
US

  • Own and strengthen security across the product stack, partnering with engineering throughout development.
  • Build security systems including secrets management, certificate infrastructure, audit logging, and vulnerability management.
  • Lead security reviews, threat modeling, and drive security compliance programs and incident response.

Early-stage B2B identity and access management company focused on building secure product systems. Small, collaborative team seeking its first dedicated security engineer to help grow the security function.

US

  • Lead and execute Delinea's Product Security Program, including secure design reviews, threat modeling, and security consulting.
  • Collaborate with Enterprise Architecture, Development, DevOps, and Cloud engineering teams to balance security with business objectives.
  • Define baseline cloud, container, application, and infrastructure security standards and integrate them into CI/CD pipelines.

Delinea is a pioneer in securing human and machine identities through intelligent, centralized authorization, with a cloud-native Identity Security Platform that applies AI-powered context across the entire identity lifecycle. We are a passionate, global team driven by world-class product leadership, outstanding engineers, and strategic investment from TPG, valuing diversity, innovation, and a culture of respect and fairness.

$140,000–$160,000/yr
US

  • Design and maintain secure architectures across AWS, Azure, and GCP with infrastructure-as-code and policy-as-code enforcement.
  • Secure AI/ML pipelines and LLM applications, addressing OWASP Top 10 for LLMs and implementing guardrails and content-filtering controls.
  • Drive security operations, including SIEM monitoring, incident response, and supporting HIPAA/HITRUST/SOC 2 compliance.

Reveleer delivers a unified platform for risk adjustment, quality improvement, clinical intelligence, and member management for health plans and provider organizations in value-based care. Trusted by 80+ customer organizations nationwide, the company fosters a collaborative, compliance-focused culture with transparent, human-in-the-loop AI at its core.

$214,200–$308,000/yr
US

  • Serve as deputy to the CISO, representing security to executives, customers, and regulators.
  • Lead and grow managers and senior engineers across Security Engineering and Security Operations.
  • Own the security roadmap, including cloud security, detection and response, identity, and platform security.

Abnormal Security uses behavioral AI to protect organizations from sophisticated email and collaboration attacks. Trusted by 5,000 enterprises, the company values security engineering, partnership, and a paved-path approach to reducing risk.

$0–$185,800/yr
Global 26w maternity 26w paternity

  • Design and build security solutions across application security, infrastructure, and AI agentic systems.
  • Secure integrations, manage secrets, and review public-facing APIs for vulnerabilities.
  • Develop AI governance standards and security review agents to protect user trust.

Wave builds mobile financial services across Africa, making cash deposits, withdrawals, and payments accessible to millions. With a rapidly growing team in 9 countries and a remote-first culture, Wave fosters autonomy and ownership.

$147,263–$227,010/yr
Global

  • Secure and operate AWS and Kubernetes environments supporting Chainalysis products and AI platforms.
  • Troubleshoot production issues, ship Terraform and Kubernetes changes, and strengthen infrastructure security controls.
  • Collaborate across infrastructure, security, and AI teams, and participate in on-call to drive fixes to completion.

Chainalysis is a blockchain data platform that helps governments and businesses investigate illicit activity and manage risk through data, services, and solutions. The global company values diversity, innovation, and AI-driven work, with employees and customers around the world.

US

  • Improve cloud security posture through practical, scalable policy engineering.
  • Deliver reusable Terraform modules and secure-by-default infrastructure patterns.
  • Support FedRAMP and regulated cloud environments with effective technical controls and continuous monitoring.

UltraViolet Cyber is a platform-enabled unified security operations company providing managed and custom-tailored security operations solutions to Fortune 500, Federal Government, and Commercial clients. Founded and operated by security practitioners with decades of experience, the company combines technology innovation and human expertise to make advanced real-time cybersecurity accessible for all organizations.

South Africa

  • Conduct hands-on penetration testing and security assessments for Kubernetes and cloud-native products.
  • Own vulnerability management from discovery through patch development, release, and verification.
  • Guide secure engineering practices and threat modeling across the product lifecycle.

They build next-generation Kubernetes and AI infrastructure for organizations operating at scale. The company is fast-growing, open-source-oriented, and values ownership, technical excellence, and measurable impact.

UK Unlimited PTO 18w maternity 12w paternity

  • Set product security direction across major products and platforms, leading cross-functional initiatives.
  • Embed security by design into roadmaps and engineering work, with high autonomy.
  • Drive security assurance programs and mentor engineers across the organization.

Chainguard is the trusted source for open source, delivering hardened, secure, and production-ready builds of open source software. They are a venture-backed company with Fortune 500 clients and a remote-first culture.

US

  • Collaborate with Development and Architecture teams to build complex, highly available cloud environments.
  • Provide Level 3 technical support and act as SME for implementing infrastructure for our core product.
  • Design and maintain secure, scalable infrastructure while documenting best practices and performing root cause analysis.

Smile Digital Health provides a FHIR-based data liberation platform that helps healthcare stakeholders collect and exchange data, impacting patients in over 20 countries. The company ranked #19 on Deloitte's Technology Fast 50 for 2024 and fosters a culture of respect, inclusion, and authenticity.

US 4w PTO

  • Lead application security protocols throughout the SDLC.
  • Partner with engineering teams to embed security into architecture and development.
  • Perform hands-on security testing of web apps, APIs, and cloud-native services.

K Health is an AI-powered virtual care engine that modernizes the primary care loop using clinical AI and virtual clinics. Founded in 2016 and headquartered in New York City, the company is backed by over $443.5M and aims to build diverse, collaborative teams.

$150,000–$175,000/yr
US Unlimited PTO

  • Lead and mentor a high-performing Security Engineering and CloudSecOps team, defining the security engineering roadmap and ensuring resilient security controls across cloud, hybrid, and enterprise environments.
  • Partner with IT, DevOps, Engineering, and Product to embed secure-by-design practices, automate security monitoring, and drive incident readiness and vulnerability management.
  • Own cloud security architecture, identity and access management, and security tooling across AWS, Azure, GCP, and hybrid infrastructure to align with business risk tolerance.

symplr provides a healthcare operations platform that drives effective, efficient, and connected workflows. This remote-first company has employees across the US, India, and the Netherlands, guided by values of teamwork, customer focus, and integrity.

$151,000–$178,500/yr
US

  • Architect and harden AWS, serverless, data, and EKS with Infrastructure-as-Code.
  • Secure APIs, SDLC, and video platform; run vulnerability and pen testing.
  • Own SOC 2, HIPAA, AI security governance, and incident response.

AnswersNow is a venture-backed digital health company delivering virtual autism care to families. The company is a remote-first, high-growth startup focused on making personalized therapy more accessible.

Global 4w PTO

  • Shape and execute application security and cloud security posture, driving secure-by-design practices and threat modeling across services and infrastructure.
  • Partner with product engineering to embed security throughout the SDLC and integrate developer-friendly security tooling into CI/CD pipelines.
  • Establish cloud security controls, automate threat detection, and build a security champion network to scale secure practices.

Clutch is a vertical SaaS company, backed by Andreessen Horowitz, that helps credit unions become FinTech lenders and improve members' financial well-being. It is a fast-paced fintech startup building a security-first engineering culture and leveraging AI to amplify innovation.