Senior Security Engineer

About Later

Later is a leading influencer marketing company that equips brands with intelligent tools to design impactful campaigns confidently. Leveraging AI-powered technology combined with over a decade of exclusive data—covering billions of social interactions and more than $2.4 billion in confirmed influencer-driven sales—Later empowers marketing teams to anticipate effectiveness before launch. Trusted by prominent brands like Nike, Wayfair, Unilever, and Southwest Airlines, Later integrates creativity with measurable outcomes to ensure marketing investments produce tangible results.

Role Overview

As a Senior Security Engineer at Later, you will play a pivotal role in enhancing the organization's security posture by blending extensive security knowledge with software development expertise. Your main focus areas will include application and cloud infrastructure security, embedding secure development processes, managing vulnerabilities, and advancing compliance, particularly SOC 2 readiness. Collaboration across technical and business units such as Engineering, IT, Product, Legal, People, and Finance will be critical to integrating security seamlessly into company operations.

Key Responsibilities

• Evaluate and continuously strengthen security measures across applications, cloud environments, infrastructure, vendors, and business processes.
• Develop and roll out scalable security policies and automated controls that support SOC 2 compliance and operational security standards.
• Work closely with cross-functional teams to align security efforts with company objectives and risk management priorities.
• Convert SOC 2 and related compliance frameworks into actionable technical controls, processes, and documentation that sustain continuous audit readiness.
• Identify cybersecurity gaps, prioritize remediation actions, and facilitate practical risk-based decisions.
• Promote security awareness and safe operating procedures company-wide.
• Create and maintain internal automation tools assisting secure development, vulnerability management, and compliance automation.
• Integrate security controls into CI/CD workflows including scanning, dependency and container security, and secret management.
• Lead application security initiatives such as threat modeling, secure reviews, code audits, API and microservices protection.
• Enhance cloud infrastructure and corporate system security through hardening, monitoring, and IaC security assessments.
• Collaborate for vulnerability identification, clear communication of security impacts, and remediation drives.
• Improve security monitoring, alerting, incident detection, and response readiness with documented workflows.
• Provide clear, practical security advice across all levels of the organization, ensuring security enhances, rather than impedes, business agility.

Success Indicators

• Complete a thorough security posture review within 90 days and establish a prioritized remediation plan with stakeholder alignment.
• Automate and document core SOC 2 security controls with seamless evidence collection by 6 months.
• Embed advanced security practices within CI/CD pipelines, including scanning, secret and container security as development standards.
• Serve as a trusted security resource for cross-departmental teams, fostering shared understanding and proactive risk management.
• Achieve robust security observability with comprehensive logging, alerting, and a practiced incident response approach.

Qualifications

• 5 to 7+ years of professional experience in Security Engineering or Software Engineering with significant security responsibilities.
• Proven track record of developing and managing reliable security automation and internal tooling.
• In-depth understanding of application, infrastructure, and cloud security, plus secure CI/CD and corporate controls.
• Practical experience in vulnerability handling, threat modeling, secure SDLC, and operational security improvements.
• Familiarity with security standards and frameworks such as OWASP, NIST, CIS Controls, SOC 2, and ISO 27001, and their application in business settings.
• Hands-on knowledge supporting SOC 2 compliance through automation and auditable controls.
• Experience with cloud security monitoring platforms including AWS Security Hub, Azure Security Center, or GCP Security Command Center.
• Exposure to SIEM/SOAR solutions, logging platforms, detection engineering, and incident response practices.
• Skill with Infrastructure-as-Code security scanning tools like Terraform or CloudFormation.
• Ability to convey complex security concepts clearly to both technical and non-technical audiences.
• Collaborative experience liaising with engineering, IT, compliance, and business divisions to enhance security.
• Knowledge of C#, modern backend architectures, cloud-native designs, and SaaS operational tooling is a plus.

Work Ethic and Personal Traits

• Focused on delivering impactful results, prioritizing efforts that align with clear objectives and deadlines.
• Strategically minded with a customer-first approach, anticipating risks to support long-term growth and trust-building.
• Driven by continuous learning, curiosity, and challenging existing norms to achieve improvement.
• Collaborative, adaptable, and resilient in dynamic environments, fostering positivity and removing obstacles.
• Holding oneself accountable while embracing transparency and feedback for growth.
• Emotionally intelligent, promoting inclusivity, empathy, and inspiring colleagues with integrity and optimism.

Compensation Model

Later adopts a data-driven and market-aligned compensation strategy with periodic reviews considering role, geography, and performance. Salary ranges are publicly disclosed for transparency and are tailored based on individual skills and experience. Canadian candidates can expect base compensation between 110,000 and 160,000 CAD annually; US-based candidates have a range of 125,000 to 205,000 USD.

Work Location

Later operates offices in Boston (MA), Vancouver (BC), and Vancouver (WA). This position supports fully remote work arrangements.

Diversity and Inclusion

Later is dedicated to fostering an equitable workplace emphasizing culture add rather than culture fit. Commitment to unbiased hiring, fair pay, and inclusive promotion policies underpins its dedication to systemic change. The company is an equal opportunity employer and actively accommodates applicants needing support during recruitment.