Staff Security Engineer

Job summary

The role involves leading a Security Enablement Team focused on platform security, identity, and network security. The engineer will design and implement security solutions that integrate seamlessly into existing engineering workflows, ensuring secure systems are built from the ground up.

Qualifications

• Several years of experience in production infrastructure and security, with deep expertise in either platform security or identity and access management.

Responsibilities

• Design and implement paved roads for image scanning, SBOM generation, and CVE response within existing pipelines.
• Lead the design and tooling for a unified internal network and VPN across multiple cloud providers and offices.
• Collaborate with authentication service teams on identity management, including MFA rollouts and token lifecycle management.
• Develop audit logging capabilities for teams to utilize without redundancy.
• Manage external penetration testing processes and ensure findings are addressed by relevant teams.
• Mentor team members and enhance overall security practices across the organization.

Skills

• Strong background in platform security, including vulnerability scanning and CVE management.
• Hands-on experience with identity and authentication systems, particularly in CI/CD environments.
• Proven ability in designing and managing network security across cloud environments.
• Familiarity with Infrastructure as Code tools such as Terraform.

Education

• Relevant degree or equivalent experience in a related field.

Tools

• Experience with GitOps tools, Kubernetes security, and security tooling development is a plus.