Staff/Lead Security Engineer, Mimica

• Lead/Staff experience (typically 7+ years) in security engineering, AppSec or SecOps, with a strong preference for experience in startup or scale-up environments
• Strong expertise in AppSec or CloudSec
• Proven ability to independently deploy and manage cloud security solutions, especially in GCP (big plus), AWS, or Azure
• Experience preparing for SOC2, ISO 27001, or FedRAMP
• Deep expertise in one or ideally several of the following: vulnerability management programs, cloud-native SIEM/logging, CSPM/CNAPP tools, IaC security, secure SDLC integration, and incident response
• Strong communication skills - you can explain complex risks or trade-offs clearly to both technical and non-technical audiences

Desirable

• We’re a fast-growing Scale-up building up our security program from the ground up. As the new member of the InfoSec team, you’ll own critical security initiatives end-to-end, working side-by-side with Engineers to harden our cloud-native SaaS platform and significantly raise our overall security posture
• This is a high-impact, high-autonomy role perfect for a self-starter who enjoys building and deploying scalable security processes in a scale-up environment
• Your manager will be the Head of InfoSec, and you’ll have another Security Engineer as a peer
• Lead the build-out and operation of core security capabilities: vulnerability management, patching, SIEM/logging, cloud security monitoring, and alert triage
• Deploy, configure, and tune security tooling (scanners, WAFs, CSPM, SIEM, endpoint protection)
• Partner with engineering to build security with developer experience in mind
• Triage and assess vulnerabilities, drive remediation prioritisation, and reduce risk in a pragmatic yet rigorous way
• Design and implement tactical incident-response playbooks and improve detection coverage
• Periodically review major architectural changes and guide engineering on secure design trade-offs
• Continuously improve processes so security scales as the company grows

• Stage 1 | Recruiter Screen with Technical Recruiter
• Stage 2 | Hiring Manager interview with Head of InfoSec
• Stage 3 | Live Challenge - with the Sec + Engineering Team
• Stage 4 | Behavioural Interview - with Manager + CTO & Co-founder