Senior Security Engineer, Granum

• 6+ years hands-on experience in security, DevSecOps, platform engineering, or infrastructure within a SaaS or cloud-native environment
• Cloud Security Expertise: Strong experience building secure cloud infrastructure (Azure and/or AWS) using infrastructure-as-code (Terraform preferred)
• Automation & Code Proficiency: Demonstrated ability to translate security policy into practice via actual code, automation, and CI/CD pipelines
• Technical Acumen: Experience with tools/practices like static code analysis, container/dependency scanning, RBAC, OIDC & identity standards, secret management, cloud networking, and observability
• Regulatory Knowledge: Working knowledge of modern authentication, network segmentation, encryption, and regulatory concepts (SOC2, PCI, GDPR) applied to SaaS
• Builder Mentality: A security mindset that focuses on creating robust, automated solutions rather than just identifying problems or writing policy documents
• Collaborative Communication: Excellent communication skills with an approach that brings other engineers along, influencing through code, automation, and enablement
• Learning Agility: Willingness and excitement to learn new things, especially at the intersection of security and AI/ML

Desirable

• This is a pivotal, first-time hire for a Security Engineer dedicated to proactively safeguarding our platform, cloud, and data infrastructure
• This builder role within the Platforms team is crucial for designing and implementing foundational security controls, policies, and automation
• You will enable rapid engineering while protecting the business, our data, and our customers, especially as we leverage new AI tools to empower our customers, ensuring responsible use and preventing misuse
• You'll be deeply hands-on, collaborating with Platform and AI teams, and reporting to the VP of Engineering (Platforms & AI Enablement). You will help set the security direction for both our traditional SaaS stack and emerging AI/ML initiatives. This means:
• Leading Security Foundations: Implementing technical security controls across Azure/AWS, networks, and applications using infrastructure as code, automation, and DevSecOps
• Driving Policy into Practice: Creating and operationalizing security policies, benchmarks, and guardrails with a focus on automation and self-service for engineers, translating governance into CI/CD checks and access controls
• Championing Security as Code: Building and maintaining security-relevant Terraform modules and IaC policies, evolving our infrastructure repo, and fostering "security as code" throughout the SDLC
• Shifting Left on Security: Embedding static analysis, dependency/container scanning, and compliance checks into CI/CD pipelines (Github Actions)
• Governing Identity, Access, & Secrets: Designing secure patterns for RBAC, multi-tenant SaaS security, and key management (Azure AD/OAuth/OIDC)
• Strengthening Data Security: Enhancing application-level controls (e.g., RBAC, audit logs, data classification) and guiding engineering on secure coding and AI/ML pipeline management
• Securing AI/ML Workflows: Developing security and governance for AI/ML, including handling of training data (PII), model access/audit, and AI-powered features