Senior Software Engineer, Security Platform

Responsibilities

• Design, build, operate, harden, and retire security engineering services in Go and Python on AWS and Kubernetes.
• Own the NATS event-driven platform, including contracts, consumers, delivery guarantees, replay, back-pressure, and observability.
• Integrate scanners, the finding system of record, tickets, and metrics to make remediation state visible.
• Own SAST, SCA, secret-detection, container-scanning, and IaC-scanning gates, including tuning, suppression workflows, and enforcement rollouts.
• Build CI review agents, automated finding triage and verification, remediation helpers, and triage-to-remediation automation.
• Participate in threat modeling, secure design reviews, and on-call support for owned services.

Requirements

• 6+ years of professional software engineering experience, including significant backend experience.
• Strong proficiency in Golang and working proficiency in Python.
• Hands-on experience building and operating event-driven or message-based systems such as NATS or Kafka, including contracts, idempotent consumers, replay, and back-pressure.
• Hands-on experience building and operating CI/CD pipeline tooling; GitLab CI at fleet scale is a strong plus.
• Hands-on web application security knowledge, including applying the OWASP Top 10 to real code.
• Experience with SAST, SCA, and secret-scanning tools such as Semgrep, CodeQL, Snyk, Trivy, Grype, and gitleaks.
• Demonstrated use of AI tooling such as Claude Code, Codex, Cursor, or custom LLM integrations, including building adopted agentic workflows.
• Working knowledge of AWS and Kubernetes as deployment targets.
• Preferred experience includes fintech or payments, PCI DSS, SOC 2, SBOM pipelines, dependency governance, artifact signing, provenance, policy-as-code, admission control, bug-bounty triage, and system-level threat modeling.
• The posting states that candidates should have deployed significant changes to a production application in the past 30 days.

Benefits

• Fully remote work arrangement.
• Full-time employment.
• Opportunity to build security infrastructure and agentic engineering workflows used across the organization.
• Work alongside detection and response and network and zero-trust engineering teams.