Lead Security Engineer

Overview

In this role you embed security into engineering workflows and deliver scalable security capabilities as part of the Platform team. You will design and operate controls across the software delivery lifecycle, enabling teams to move fast while reducing risk. You’ll collaborate with squads to harden runtimes, improve supply chain visibility, and drive secure development practices. This engineering-led role offers hands-on impact across cloud, CI/CD, and security tooling to shape secure software delivery at scale. A strong contributor mindset and cross-functional collaboration are key to success.

Responsibilities

• Design, build, and operate scalable security capabilities integrated into engineering workflows
• Embed security into the SDLC with automated controls
• Improve software supply chain security through SBOM generation and dependency visibility
• Contextualize vulnerability data for effective remediation
• Provide actionable security guidance to engineering teams
• Collaborate with platform and product engineering teams on secure development practices
• Identify and assess security risks in runtime and cloud environments and support remediation
• Develop and operate runtime security tooling for production risk visibility
• Contribute to security incident response activities and runbooks
• Support reporting and compliance with risk, governance, and control teams

Key requirements

• Hands-on software, platform, or cloud engineering in public cloud environments
• Ability to design and implement security controls within engineering workflows, especially CI/CD
• Proficiency in at least one programming or scripting language
• Solid understanding of SDLC and integrating security practices
• Experience applying security testing and controls in CI/CD pipelines
• Familiarity with cloud-native technologies, containers, and orchestration
• Strong analytical and problem-solving skills
• Understanding of modern engineering practices, including secure software delivery

• analytical thinking
• clear communication
• cross-functional collaboration
• CI/CD security controls
• cloud-native technologies
• containerization and orchestration

…