Senior Security Engineer

Overview

We are seeking a Senior Security Engineer based in India to join our dynamic team. This role demands a proactive hands-on professional who will lead security initiatives throughout their lifecycle within our mixed environment involving AWS, Netlify, and Supabase. You will independently identify problems, choose solutions, drive projects to completion, and manage deployment and operations of your work. Collaborating closely with Engineering, Product, IT, Legal, and People teams, you will safeguard company assets, ensure compliance, and support rapid business growth.

About the Company

Nerdy, the organization behind Varsity Tutors, aims to revolutionize education by integrating live human expertise with advanced generative AI technology to significantly enhance learning outcomes worldwide. We value entrepreneurial spirit, rapid innovation, full ownership of projects, and impactful contributions rewarded by meritocracy.

Core Values and Working Philosophy

• AI integration at all levels, encouraging the use of generative AI tools in development.
• Fast-paced innovation comparable to startup culture.
• Merit-based idea evaluation without bureaucracy.
• Full accountability for designed, developed, and operated products.
• Rewarding tangible results and leadership principles.
• Continuous exploration of generative AI frontiers and critical reassessment of traditional methods.
• Focus on mission-aligned goals avoiding distractions.

Key Responsibilities

• Lead security projects independently from conception through design, implementation, deployment, and maintenance.
• Architect secure, scalable, resilient systems across AWS, Netlify, and Supabase platforms.
• Establish and manage threat detection, logging, and monitoring; respond promptly and effectively to security incidents including investigation and containment.
• Manage vulnerability processes by prioritizing and remediating risks in collaboration with engineering teams.
• Proactively identify and rectify security weaknesses arising from adoption of new tools or platforms.
• Implement and uphold controls necessary for regulatory compliance, privacy, and data protection, supporting audits with necessary documentation.
• Contribute to business continuity and disaster recovery exercises including backup validation and recovery testing.
• Leverage AI-based tools such as Cursor and Claude Code for building security frameworks, automating checks, and accelerating workflows.
• Collaborate cross-functionally to embed security in organizational processes by influencing through technical expertise and effective communication.
• Select, deploy, and manage security tools and IT systems and conduct vendor security reviews.

Required Qualifications

• Over five years of experience in Security Engineering, Cloud Security, or Infrastructure domains.
• Experience specifically securing modern platform-as-a-service environments like Netlify or Supabase.
• Familiarity with cloud infrastructure concepts, Identity and Access Management (IAM), endpoint security, and network security.
• Proven ability to develop maintainable Python services and API integrations incorporating validation, error handling, testing, version control, and comprehensive documentation.
• Experience utilizing AI-assisted development tools such as Cursor, GitHub Copilot, or Claude for enhancing security tasks.
• Strong knowledge of cybersecurity frameworks such as NIST, SOC 2, and ISO 27001, including risk management and compliance requirements.
• Proficient in threat detection, vulnerability assessment, and incident response methodologies.
• Demonstrated success in managing and delivering complex projects independently from start to finish.
• Capability to influence and guide engineering and product teams toward security best practices without formal authority.
• Excellent communication skills to translate technical risks to non-technical audiences.
• Bachelor’s degree in Computer Science, Information Security, or related field; advanced degrees or certifications are a plus.

Additional Benefits

• Competitive salary packages aligned with the market.
• Fully remote work option within your home country.
• Flexible paid time off policy promoting personal well-being.
• Paid holidays in accordance with your national calendar.
• Comprehensive continuous learning membership for employees and their households, featuring personalized tutoring and access to various learning resources.
• Access to advanced AI tools designed to enhance productivity in security engineering tasks.