Senior Security Engineer

Vaga não está no LinkedIn

🔥 14 horas atrás

🏄 California, Colorado, +4 estados a mais – Remoto

🏄 California – Remote ⛰️ Colorado – Remote 🎰 Nevada – Remote 🏖️ New Jersey – Remote 🌲 North Carolina – Remote 🤠 Texas – Remote

💵 $170.000 - $215.000 / ano

⏰ Tempo Integral

🟠 Sênior

👮‍♂️ Cibersegurança / Engenheiro de Segurança

👻 Score fantasma 0%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Reuse

SiteLinkedInTodas as Vagas

51 - 200 funcionários

Fundada em 2017

💼 Consultoria

🛡️ Seguros

📦 Logística

Consulting • Insurance • Logistics

A Reuse é uma fintech que oferece aos usuários um serviço gratuito para consultar e atualizar diariamente sua pontuação de crédito. A plataforma disponibiliza ferramentas para ajudar as pessoas a entender sua pontuação de crédito, além de acesso a ofertas de cartões de crédito, empréstimos e produtos de seguros personalizados de acordo com suas necessidades financeiras. A Reuse também oferece conteúdos educativos sobre como construir um bom histórico de crédito e melhorar a saúde financeira, permitindo que os usuários tomem medidas para aprimorar seu perfil de crédito.

Descrição

• Run security reviews for new tools, vendors, and projects, including data handling, AI usage, DPAs, PII, authentication/authorization, and third-party security reports • Own access and infrastructure security, including IAM least-privilege reviews, storage/database access controls, environment segregation, service-to-service authentication, and network configuration audits • Run vulnerability management across cloud and endpoints • Manage IDS/IPS and EDR/MDR tooling • Lead security incident response end to end: triage, investigation, containment, documentation, and runbook development • Implement and maintain technical controls supporting PCI DSS, SOC 2, and ISO 27001 compliance programs • Support internal audits, risk metrics, and disaster recovery planning • Partner with DevOps/IT on patch management and secure infrastructure defaults • Present tooling and risk recommendations to engineering leadership • Build an in-house application security scanning program and integrate SAST/SCA/IaC tooling into GitLab CI and Jenkins • Define severity-based remediation SLAs and drive rollout across services • Build internal security tooling and automation using Python/boto3 and APIs • Build and tune detection pipelines integrating security alerts into ELK/Kibana and writing attack-detection rules • Threat-model and penetration-test AI/LLM systems, coordinate external penetration tests, and drive remediation • Maintain security policies and practices and drive company-wide training and adoption • Own security end-to-end for Credit Sesame’s AI-powered financial wellness and credit intelligence platform

🎯 Requisitos

• 7+ years of hands-on security engineering experience across application security, cloud security, and network/penetration testing • Independent tooling or architecture decision-making experience • Self-directed, pragmatic, and strong prioritization • Production automation experience, including API integrations, custom collectors, or internal tooling • Hands-on experience deploying and running open-source security tools such as Burp Suite Community/OWASP ZAP, Nmap, Nuclei, Metasploit, Semgrep, Trivy, Wazuh/OSSEC, ELK/Kibana, Prowler/ScoutSuite, or HashiCorp Vault • Solid AWS security experience • Working knowledge of PCI DSS, SOC 2, and ISO 27001 • Experience threat-modeling emerging security domains such as AI/LLM applications • Excellent communication skills for explaining technical risk and cost/coverage tradeoffs to engineers and executives • BS in Computer Science or related field, or equivalent hands-on experience • OSCP, GPEN, or similar certifications, bug bounty experience, startup experience, and LLM/AI security experience are bonuses • Must be legally authorized to work in the United States • Must reside in California, Colorado, North Carolina, New Jersey, Nevada, or Texas

🏖️ Benefícios

• Equity in a pre-IPO company backed by top VCs • Comprehensive medical, dental, and vision insurance • Monthly home office stipend • Professional development program • Flexible paid time off • 10 paid holidays • 6 Sesame Wellness days • Culture emphasizing total wellness and work-life harmony

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo