Staff Security Engineer, GoGuardian

• The ideal candidate knows the ins and outs of cloud security and can collaborate effectively with both technical and non-technical teams
• 7+ years of experience in security engineering, cloud security, or application security
• Deep expertise in securing cloud-native environments (AWS, and GCP)
• Strong knowledge of security principles, including encryption, identity management, and threat modeling
• Experience with DevSecOps, Infrastructure as Code (Preferably Terraform), CI/CD pipelines, and automating security testing
• Proficiency in at least one programming language (Python, Go, Java, etc.)
• Hands-on experience with security tooling such as SIEMs, IDS/IPS, WAFs,and vulnerability scanners
• Incident response experience, including forensic analysis and malware detection
• Strong communication skills with the ability to influence and educate engineering teams on security best practices

Desirable

• We’re looking for a Staff Security Engineer to play a critical role in fortifying GoGuardian’s security posture across our products and internal operations
• In this role, you’ll lead high-impact security initiatives, partner with engineering and IT teams, and provide strategic guidance on best practices to safeguard our data, infrastructure, and users
• This is a high-visibility role where you will set the technical direction for security and help shape our long-term security strategy
• This position sits on the Security Engineering team, a team that manages the security of our data, applications, and cloud infrastructure
• Lead Security Architecture & Strategy – Design and implement security strategies across our cloud-based infrastructure, applications, and internal systems
• Threat Modeling & Risk Mitigation – Proactively identify vulnerabilities and partner with engineering teams to mitigate risks before they become incidents
• Application & Cloud Security – Collaborate with development teams to build security into the software development lifecycle (SDLC), including secure coding practices, automated security testing, and CI/CD security
• Incident Response & Threat Hunting – Investigate security incidents, lead response efforts, and continuously refine our detection and prevention capabilities
• Identity & Access Management (IAM) – Develop robust authentication, authorization, and identity management controls to protect our data and infrastructure
• Security Awareness & Best Practices – Mentor and educate teams on security best practices, providing guidance on security tooling, threat intelligence, and compliance frameworks
• Compliance & Data Privacy – Support compliance with SOC 2, GDPR, COPPA, and other regulatory requirements by ensuring security controls are properly implemented
• Automation & Tooling – Build security automation tools to enhance detection, response, and remediation capabilities