Source Job

  • Architect and build multi-cloud security controls, including VPC segmentation and IAM policy design.
  • Build policy-as-code and IaC security guardrails integrated into CI/CD for pre-merge and pre-deploy gates.
  • Own vulnerability management and act as technical escalation point for incidents, leading forensics and remediation.

AWS Terraform Python Kubernetes Vulnerability Management

20 jobs similar to Sr Security Engineer

Jobs ranked by similarity.

US

  • Lead threat modeling and security reviews across Wiz's products and cloud infrastructure, identifying attack surfaces and developing scalable mitigation strategies.
  • Build automation, policy-as-code, and security tooling that enables development teams to 'shift left' and integrate end-to-end security into their workflows.
  • Drive vulnerability management and remediation efforts, prioritizing issues, implementing mitigations, and designing strategic preventative controls in software supply chains from development through production.

Wiz is redefining security for the AI era, enabling teams to secure cloud and AI applications by connecting code, cloud, and runtime into a single shared context. As one of the fastest-growing startups ever, we are trusted by over 65% of the Fortune 100 and scan over 230 billion files daily, with a culture that values world-class talent and is now powered by Google.

$120,000–$150,000/yr
US

  • Fix vulnerabilities across the stack by writing pull requests in application repositories and Terraform.
  • Build and tune SIEM detections, mapping coverage to MITRE ATT&CK and reducing false positives.
  • Lead incident response, harden AWS estate, and automate security workflows with code.

Cloudbeds is a hospitality management platform powering hotels across 150 countries, processing billions in bookings annually. The company is a remote-first team of 650+ across 40+ countries, recognized for innovation and an inclusive culture.

India

  • Own security architecture across Azure and AWS, covering tenant design, network segmentation, and workload isolation.
  • Raise the engineering bar with hardened infrastructure-as-code modules, secure defaults, and policy-as-code signals at commit time.
  • Own vulnerability and exposure management end to end, delivering findings as pull requests, not tickets.

One Identity enables organizations to secure, manage, monitor, protect, and analyze information and infrastructure to drive innovation. With a globally distributed team, we build enterprise products at scale and foster a collaborative, improvement-driven culture.

$150,000–$160,000/yr
US Unlimited PTO

  • Implement and maintain AWS security configurations across development, staging, and production environments.
  • Operate SAST, DAST, and SCA tools integrated into CI/CD pipelines to remediate vulnerabilities.
  • Support compliance efforts such as SOC 2 Type II and ISO 27001 audits and improve security processes.

Pacvue is a leading software suite for eCommerce advertising, sales, and intelligence, helping brands grow on Amazon, Walmart, Instacart, and other marketplaces. The team is energetic, passionate, and focused on innovation, with a mission to help brands and sellers succeed.

UK

  • Lead and grow a team of security engineers focused on protecting cloud-native environments and CI/CD pipelines.
  • Drive technical strategy, threat modeling, and security automation across multi-cloud infrastructure.
  • Partner with engineering and DevOps teams to embed secure-by-design principles and manage vulnerability and supply chain security.

Wiz is a cybersecurity company that provides a cloud security platform connecting code, cloud, and runtime to secure cloud and AI applications. It is one of the fastest-growing startups, trusted by over 65% of the Fortune 100, and now powered by Google, with a culture that values world-class talent.

$104,000–$166,000/yr
US

  • Design and implement security architecture for AWS workloads aligned with FedRAMP Moderate baseline controls.
  • Build and maintain security guardrails using AWS-native services (IAM, GuardDuty, Security Hub, Config, CloudTrail, KMS, WAF, Macie, Inspector).
  • Support ATO activities, continuous monitoring, vulnerability scanning, and incident response.

Peraton is a next-generation national security company providing mission capability integration and IT solutions to protect the nation and allies. It serves as a valued partner to government agencies and every branch of the U.S. armed forces, with a culture focused on solving daunting customer challenges.

US

  • Get hands-on with our Go codebase, AWS and Kubernetes environment, SIEM, and security services, contributing security feedback to design docs and shipping your first fix or detection.
  • Own a security domain end to end, such as cloud hardening or detection engineering, and ship reusable Go security middleware adopted by service teams.
  • Drive multi-quarter initiatives like default-deny networking, expand Kubernetes security, and automate compliance evidence for audits.

Bastion provides regulated infrastructure for businesses to hold, move, and issue stablecoins, combining custodial wallets, payment orchestration, and issuance. As a 40-person startup, we operate through our own regulated entities with built-in compliance and risk controls.

Global

  • Design and maintain security controls across AWS and GCP infrastructure and platform services.
  • Manage IAM, network segmentation, encryption, key management, monitoring, threat detection, and incident response.
  • Own SC TRM and BNM RMiT controls for cloud and infrastructure, including audit and remediation support.

BJAK is a mobile-first insurance platform and the leading insurance platform in Southeast Asia, helping people plan, save, and grow their money. With over 20 nationalities working globally, the team values passionate, driven people who love building next-generation financial applications.

$120,000–$170,000/yr
US

  • Own and improve WellBeam's AWS infrastructure, delivery pipelines, and production reliability with a security-first mindset.
  • Lead SOC 2 and HIPAA technical controls, vulnerability management, and security operations as the internal security lead.
  • Build observability, automate deployments, and strengthen backup, disaster recovery, and incident response across the platform.

WellBeam is a healthcare interoperability platform connecting health systems, physicians, and post-acute providers. It is a remote-first team offering flexible working hours, competitive compensation, and regular company offsites.

$151,000–$178,500/yr
US

  • Architect and harden AWS, serverless, data, and EKS with Infrastructure-as-Code.
  • Secure APIs, SDLC, and video platform; run vulnerability and pen testing.
  • Own SOC 2, HIPAA, AI security governance, and incident response.

AnswersNow is a venture-backed digital health company delivering virtual autism care to families. The company is a remote-first, high-growth startup focused on making personalized therapy more accessible.

$120,000–$150,000/yr
US

  • Protect cloud infrastructure, applications, and customer data across a modern technology environment.
  • Identify and remediate vulnerabilities directly in application repositories and infrastructure code.
  • Build and tune SIEM detections, strengthen AWS security controls, and lead incident response.

Cloudbeds is a hospitality technology company providing cloud-based management solutions for lodging businesses. It operates as a remote-first organization with a globally distributed team across 40+ countries and a small, senior security team.

Europe

  • Own cloud and product security across AWS and GCP, setting baselines for IAM, networking, data protection, and workload configuration.
  • Partner with platform, SRE, and product teams to embed practical security controls into developer workflows and automate guardrails in delivery pipelines.
  • Perform security architecture reviews, threat modeling, and incident response, and drive systemic improvements with meaningful security metrics.

We create intelligent software development tools used by more than 15 million users and 300,000 companies, including 88 of the Fortune Global Top 100. Our mission is to make development teams more productive and AI adoptable at scale, and we foster an open and inclusive workplace.

$115,000–$140,000/yr
US

  • Perform systems administration, patching, vulnerability scanning, and remediation for AWS and GCP cloud workloads.
  • Configure and maintain security tools for endpoint protection, log collection, vulnerability scanning, and compliance monitoring.
  • Support 24x7 on-call rotation and collaborate with security analysts to deliver secure solutions for FedRAMP and FISMA customers.

Quantum Sky is a technology company that engineers solutions for cyber, networks, software, and quantum for mission-driven clients. They foster a collaborative, innovative, and mission-driven environment where every team member plays a critical role.

US Unlimited PTO

  • Partner with engineering to identify and mitigate security risks before launch, building secure frameworks and libraries that make control adoption easy.
  • Own identity and secrets management, including credential issuance, rotation, and workload authentication across cloud and Kubernetes environments.
  • Harden cloud security controls and build security models for AI agents with permission boundaries and tenant isolation.

Fieldguide builds software that automates assurance and audit work for cybersecurity, privacy, and financial audits, helping businesses enable trust. They are a remote-first company backed by top investors and trusted by over 50 of the top 100 accounting and consulting firms, with a values-driven culture.

US

  • Collaborate with Development and Architecture teams to build complex, highly available cloud environments.
  • Provide Level 3 technical support and act as SME for implementing infrastructure for our core product.
  • Design and maintain secure, scalable infrastructure while documenting best practices and performing root cause analysis.

Smile Digital Health provides a FHIR-based data liberation platform that helps healthcare stakeholders collect and exchange data, impacting patients in over 20 countries. The company ranked #19 on Deloitte's Technology Fast 50 for 2024 and fosters a culture of respect, inclusion, and authenticity.

$150,000–$175,000/yr
US Unlimited PTO

  • Lead and mentor a high-performing Security Engineering and CloudSecOps team, defining the security engineering roadmap and ensuring resilient security controls across cloud, hybrid, and enterprise environments.
  • Partner with IT, DevOps, Engineering, and Product to embed secure-by-design practices, automate security monitoring, and drive incident readiness and vulnerability management.
  • Own cloud security architecture, identity and access management, and security tooling across AWS, Azure, GCP, and hybrid infrastructure to align with business risk tolerance.

symplr provides a healthcare operations platform that drives effective, efficient, and connected workflows. This remote-first company has employees across the US, India, and the Netherlands, guided by values of teamwork, customer focus, and integrity.

US

  • Improve cloud security posture through practical, scalable policy engineering.
  • Deliver reusable Terraform modules and secure-by-default infrastructure patterns.
  • Support FedRAMP and regulated cloud environments with effective technical controls and continuous monitoring.

UltraViolet Cyber is a platform-enabled unified security operations company providing managed and custom-tailored security operations solutions to Fortune 500, Federal Government, and Commercial clients. Founded and operated by security practitioners with decades of experience, the company combines technology innovation and human expertise to make advanced real-time cybersecurity accessible for all organizations.

US Unlimited PTO

  • Lead the technical vision for platform hardening across AWS and GCP, including tier-0 access and secrets services.
  • Own the hardening roadmap for critical cloud infrastructure and drive operational excellence with rigorous on-call practices.
  • Mentor a global team of engineers and partner cross-functionally to build secure-by-default controls.

DoorDash is a technology and logistics company building the most reliable delivery network for consumers, merchants, and dashers. The company is growing rapidly and fosters a culture of learning, customer obsession, and inclusive leadership.

$75,600–$108,000/yr
EMEA

  • Design and maintain secure, scalable multi-region cloud infrastructure using Infrastructure-as-Code.
  • Architect CI/CD pipelines, observability, and security automation for a global payments network.
  • Drive platform reliability, developer tooling, and operational excellence across engineering teams.

BVNK is a stablecoin-powered financial infrastructure company, now part of Mastercard, helping enterprises send, receive, convert, and settle stablecoins and fiat across 130+ countries. It is a diverse, globally distributed team recognized as a top fintech and one of the world's most loved workplaces.

Europe 16w maternity 16w paternity

  • Own identity, SSO, and device management across Google Workspace and macOS, automating joiner and leaver flows from day one.
  • Secure cloud and SaaS environments by managing IAM, cloud guardrails, and vulnerability management end to end.
  • Bring a security perspective to incidents and audits, using AI-assisted workflows to reduce manual work.

Maze is a user research platform that helps product teams build the right products faster by making user insights accessible. With less than 150 team members and a global remote workforce, Maze fosters a culture of transparency and inclusion.