Security Engineer Job Description

About the role

We are seeking a Security Engineer to safeguard our systems, applications, and data as we grow. You will run threat and vulnerability assessments, build automated security into the development pipeline, and lead detection and response when incidents occur, all while raising the security bar across engineering. This role is for someone who thinks like an attacker but builds like an engineer, balancing rigor with pragmatism.

Key responsibilities

• Identify, assess, and remediate security vulnerabilities
• Build security controls into systems and the development pipeline
• Lead detection, response, and investigation of incidents

Responsibilities

• Run vulnerability scans and penetration tests, then triage and track remediation
• Integrate security tooling like SAST, DAST, and dependency scanning into CI/CD pipelines
• Design and manage identity, access, and encryption controls across systems
• Monitor SIEM and detection tooling, tuning alerts to reduce noise and catch real threats
• Lead incident response, from containment and investigation to postmortem and fixes
• Threat-model new features and review architecture for security risks before launch
• Harden cloud and network infrastructure against misconfiguration and attack
• Maintain security policies, runbooks, and evidence for compliance frameworks like SOC 2 or ISO 27001
• Run phishing simulations and security awareness training for employees
• Track and report on the organization's security posture and risk metrics

Requirements

• Bachelor's degree in computer science, cybersecurity, or a related field, or equivalent experience
• 3 or more years in security engineering, application security, or a related role
• Hands-on experience with vulnerability assessment, incident response, and security tooling
• Strong understanding of networking, cryptography, and secure development practices
• Familiarity with compliance frameworks such as SOC 2, ISO 27001, or GDPR