Staff Security Engineer

About the Role:

As a Staff Security Engineer, you will focus on building and refining our cloud infrastructure security and detection & response capabilities. You’ll help secure our AWS environment, ensure proper monitoring, and implement response strategies for emerging threats. Success in this role requires not only technical excellence but also the ability to collaborate effectively across teams, especially in an environment where feature delivery pressures compete for bandwidth with security-focused work. You'll need to build strong relationships, communicate effectively, and be willing to step in and help where needed—whether that means writing a PR or helping troubleshoot issues.

Key Responsibilities:

• Secure our AWS environment by implementing best practices for IAM, VPC configuration, and security monitoring.
• Work closely with cloud platform teams to identify vulnerabilities and secure infrastructure against internal and external threats.
• Build and automate security controls across cloud infrastructure and CI/CD pipelines.
• Develop and maintain incident detection and response processes to ensure fast identification and mitigation of security threats.
• Implement and manage SIEM tools to track logs, monitor cloud resource activity, and proactively identify issues.
• Mentor junior engineers and foster security awareness across the company.
• Conduct regular vulnerability scans, security reviews, and assessments of AWS and cloud services.
• Support regulatory compliance requirements (SOC2, ISO), ensuring security controls are implemented in the infrastructure.
• Collaborate closely with development teams and step in to help resolve issues directly when necessary, ensuring security improvements are effectively implemented.

What We’re Looking For:

• 6+ years of experience in security engineering, with a focus on cloud infrastructure (AWS).
• A history of using cloud-native tools like Kubernetes to “shift left” in order to build security into the foundations of the develop/build/release process.
• Proficient in AWS security best practices, including IAM, CloudTrail, VPC, and security groups.
• Experience with SIEM and cloud monitoring tools.
• Familiarity with detection techniques (e.g., SAST, DAST) and incident response.
• Experience automating security tasks using scripting languages (Python, Bash, etc.).
• Strong understanding of infrastructure-as-code tools (Terraform, CloudFormation) and cloud security automation.
• Excellent communication skills, with the ability to build strong relationships with engineering teams and collaborate in a sometimes high-pressure environment.
• Willingness to go above and beyond, including submitting fixes and supporting teams directly when needed.