Security Engineer - Product

About the Organization

Join a pioneering company transforming security in the AI age. As one of the fastest-growing startups, this company empowers teams to safeguard cloud and AI applications by integrating code, cloud, and runtime into a unified context. Trusted globally by security professionals, it has a proven growth record and a culture that attracts top-tier talent. Now powered by Google, it offers an AI-enhanced platform leveraging Google's Threat Intelligence and Security Operations to enhance detection, prevention, and response across all environments, fueling further innovation.

Employees, called Wizards, collaborate worldwide to protect infrastructures of over 65% of Fortune 100 companies, securing more than 230 billion files daily. The company continues to lead and expand in a vast market, inviting exceptional professionals eager to make a meaningful impact.

Role Description

We are seeking a Security Engineer specializing in Product and Production Infrastructure security. The ideal candidate has a strong background in security assessments, vulnerability management, as well as detection and response within cloud-native setups. Collaboration with software development and DevOps teams will be key to securing products, CI/CD pipelines, and production environments. There is also scope to influence the product roadmap by applying our own platform for internal security assessment and hardening.

Key Responsibilities

• Lead threat modeling and security evaluations for products and cloud infrastructure to pinpoint attack surfaces and develop scalable mitigation strategies.
• Develop automation, policy-as-code, and security tools to enable development teams to integrate comprehensive security early in the development lifecycle.
• Establish and enforce secure baseline configurations for cloud resources and Kubernetes environments.
• Manage vulnerability assessment and remediation processes by prioritizing risks, applying mitigations, and designing preventative controls covering software supply chains from development to production.
• Enhance detection and response capabilities by building systems to detect malicious activity, manage alerts, and conduct incident investigations and remediation.
• Forge strong partnerships with engineering and operations teams to deliver solutions designed with security in mind from inception.

Minimum Qualifications

• At least 7 years of experience in security engineering or security operations focused on cloud environments.
• Hands-on experience with AWS cloud security; expertise with Azure or GCP alongside some AWS experience is also acceptable.
• Knowledge of cloud-native Kubernetes services (EKS, GKE, AKS) and container security fundamentals.
• Experience managing secure IAM and cloud identity at scale.
• Proven ability to lead in-depth technical security reviews, conduct threat modeling, and translate analysis into concrete security measures.
• Solid understanding of web application security concepts, including OWASP Top-10.
• Practical experience with Infrastructure as Code (IaC) tools such as Terraform, CloudFormation, Helm, or Pulumi.
• Ability to develop automation and security tooling using languages and frameworks like Python, Go, Shell scripting, HCL, or Rego.

Preferred Qualifications

• Bachelor’s degree in Computer Science or a related discipline, or equivalent practical experience.
• Experience collaborating with dispersed, global remote teams.
• Background in organizations that build software and/or provide managed infrastructure and technology services to customers.
• Familiarity with CNAPP, CSPM, or CIEM security solutions.

Additional Information

Applicants must have lawful authorization to work in the job location country without the need for visa sponsorship, as this role does not provide sponsorship. The company embraces diversity and equal opportunity, maintaining a nondiscriminatory hiring policy based on legally protected characteristics.

By applying, candidates agree their personal data will be processed under the company's Privacy Policy.