Remote Senior Security Engineer
$160,000 to $175,000
Apply (opens in a new tab)Remote Senior Security Engineer
Posted today
SENIORITY
Senior
SALARY
$160,000 to $175,000
About the role
- Define, drive, and execute the long-term technical roadmap for Cloud, Container, and Edge Protection programs.
- Manage and maintain edge and bot protection (e.g., WAF, CDN, DDoS mitigation).Perform security-focused infrastructure reviews for new product releases and architectural changes.
- Implement and maintain monitoring and alerting tools to detect cloud and container-related vulnerabilities and misconfigurations.
- Own container image security — vulnerability scanning and remediation at the base image layer, and building the gating needed to keep unpatched or non-compliant images out of production.
- Collaborate with Infrastructure and Engineering teams to embed security into CI/CD pipelines and deployment processes without slowing down delivery.
- Partner with Application Security and Engineering to implement security controls on opportunities identified during Threat Modeling.
- Lead initiatives around infrastructure-as-code (IaC) security and runtime protection to automate security controls and hardening.
- Identify security control gaps across cloud, container, and network infrastructure, and drive them to resolution — proposing the fix and staging the implementation (e.g., a Terraform PR) for Infrastructure to review and approve.
- Assist with threat modeling, risk assessments, and provide security guidance during the development lifecycle.
- Collaborate with incident response teams, offering expert advice on cloud-related security issues to help resolve incidents quickly.
- Develop tooling or automation to support proactive remediation and continuous security validation.
- Track and report DevSecOps KPIs, such as mean time to remediate, security control coverage, and vulnerability trends.
- Mentor engineers across the security org and set technical standards for how the team approaches cloud and container security.
- What you have:5+ years in DevSecOps, Security Engineering, or similar roles.
- Experience owning a security program or initiative end-to-end, from roadmap to execution, including influencing engineering teams outside your reporting line.
- Expertise with cloud platforms (GCP, AWS, Azure) and container orchestration (e.g., Kubernetes, ECS).Experience with cloud and container security tooling.
- Strong understanding of WAFs, bot mitigation, API gateways, and CDN security features.
- Proven experience performing secure design and architecture reviews.
- Proficiency with IaC tools (Terraform, OpenTofu, Helm, etc.) and integrating security scanners into pipelines.
- What makes you stand out:
- Extensive hands-on experience with Terraform, OpenTofu, and/or Crossplane.
- Experience with CrowdStrike.
- Solid understanding of networking principles (e.g., VPCs, load balancing, firewalls) in a cloud environment.
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.
