Senior Security Engineer, Thoughtful AI

• You might be a security engineer, a penetration tester, or a software engineer
• Regardless of your title, we’re looking for people with a strong foundation in software and network fundamentals, deep security expertise, and experience working with developers in a shared codebase
• The ideal candidate can set high standards while executing efficiently in a fast-growing startup environment
• If you enjoy solving problems across AppSec, CloudSec, and NetSec and writing the code to make those solutions real, then this role is for you
• 5+ years of experience in security engineering, product security, or software engineering with a security focus
• Solid understanding of application, infrastructure, and network security fundamentals
• Hands-on experience with AWS and Kubernetes in production environments
• Ability to write and maintain production-quality code in at least one modern language
• Experience working collaboratively with developers in shared codebases using Git-driven workflows (e.g., pull requests)
• Comfortable working independently and taking ownership in a fast-paced, high-autonomy environment
• Excellent communication skills and ability to collaborate across technical and business teams

Desirable

• We’re seeking experienced security engineers who can design secure systems, implement those ideas in code, and work seamlessly with engineering teams to solve problems across the stack, one pull request at a time
• Partner with engineering and product teams to deliver practical, high-impact security outcomes that improve reliability and developer velocity
• Design, implement, and maintain security controls across applications, infrastructure, and networks
• Contribute and review code in our internal Git repositories for customer-facing applications, APIs, internal tools, and automation
• Identify and mitigate security gaps in AWS, Kubernetes, and other cloud environments
• Work with stakeholders to harden 3rd party cloud service integrations and configurations (e.g. Snowflake)
• Participate in incident response and building SIEM detections as code
• What Success Looks Like
• Engineers see you as a trusted peer who helps them ship faster and safer
• Security controls become more defined, repeatable, and streamlined
• Security gaps are identified, prioritized, and remediated through code and automation
• Progress can be objectively measured with metrics
• Security becomes an enabler of innovation, not a bottleneck
• Primary tech stack: Python, TypeScript, Terraform, AWS, and Kubernetes