Senior Security Engineer

🕒 Setembro 15

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $133.000 - $199.000 / ano

⏰ Tempo Integral

🟠 Sênior

👮‍♂️ Cibersegurança / Engenheiro de Segurança

🦅 Patrocina Visto H1B

Esta empresa já patrocinou vistos H1B no passado.

👻 Score fantasma 1%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Guidewire Software

SiteLinkedInTodas as Vagas

1001 - 5000 funcionários

Fundada em 2001

🛡️ Seguros

💰 $750.000 Series C em 2008-03

Software • Insurance • Cloud Computing

A Guidewire Software é uma fornecedora líder de soluções de software para o setor de seguros de Property & Casualty (P&C, seguros de danos). A empresa oferece uma plataforma abrangente que inclui aplicações core como PolicyCenter, ClaimCenter e BillingCenter, além de analytics avançados e uma robusta plataforma em nuvem. A Guidewire tem foco em promover transformações digitais, aprimorar a eficiência operacional e elevar o atendimento ao cliente para seguradoras no mundo todo. Por meio de colaborações e parcerias, a Guidewire dá suporte a uma ampla gama de produtos e serviços de seguros, incluindo usage-based insurance (por uso) e embedded insurance (seguros integrados). Com seu compromisso com a inovação e o sucesso do cliente, a Guidewire continua a capacitar as seguradoras a atender às demandas em evolução do setor.

Descrição

• Lead complex infrastructure security initiatives involving multiple teams, systems, and dependencies, focusing on AWS cloud environments and CI/CD pipelines • Design, implement, and operate security controls across AWS and applicable cloud platforms • Build secure-by-default solutions using infrastructure as code, policy as code, CI/CD, and automation • Improve cloud governance, security posture, and operational resilience • Define and maintain security baselines for cloud accounts, operating systems, containers, AMIs, Kubernetes, networks, and supporting infrastructure • Support cloud account onboarding, offboarding, inventory, configuration drift management, exception handling, and control validation • Design and improve cloud and infrastructure network security, including segmentation, traffic visibility, ingress and egress control, DNS, firewalls, routing, private connectivity, monitoring, and enforcement • Secure CI/CD and software supply chains, including build and deployment workflows, dependencies, artifacts, containers, registries, third-party actions, secrets, and runner environments • Support asset and identity governance for applications, infrastructure, containers, service accounts, workload identities, API keys, AI agents, and MCP tools • Participate in AI security initiatives involving AI models, agents, and tool integrations, including threat modeling, prompt injection defenses, data egress protection, guardrails, human-in-the-loop controls, and monitoring • Apply risk-based security analysis using reachability, attack paths, asset criticality, exploitability, and business impact • Validate scanning-tool and AI-generated findings, establish ownership and remediation expectations, and improve finding-quality feedback loops • Represent Security in architecture, change management, design review, and operational forums • Communicate risks, trade-offs, assumptions, dependencies, and business impact to technical and non-technical audiences • Create standards, runbooks, architecture decision records, dashboards, documentation, and enablement materials • Mentor engineers and help partner teams adopt secure patterns without direct management responsibility • Participate in on-call rotations and incident response support for cloud and infrastructure security incidents • Monitor emerging threats and translate relevant developments into improvements to Guidewire’s security controls

🎯 Requisitos

• Typically 5+ years of experience in security engineering, cloud security, infrastructure security, DevSecOps, or equivalent practical experience • Hands-on experience designing and operating secure AWS environments is required • Experience with Google Cloud Platform (GCP) is strongly preferred; experience with other cloud platforms is a plus • Experience with cloud governance, access management integration, policy enforcement, logging and monitoring, data protection, network security, configuration management, and cloud account lifecycle controls • Hands-on experience with infrastructure-as-code using Terraform, CloudFormation, or comparable technologies • Hands-on experience building, securing, testing, and operating CI/CD pipelines, preferably using GitHub Actions or comparable platforms • Experience with pipeline automation, secrets management, artifact handling, and runner security • Hands-on scripting or programming experience using Python, Go, or another appropriate language • Practical knowledge of cloud and infrastructure networking, including segmentation, routing, DNS, firewalls, ingress and egress controls, private connectivity, and network telemetry • Experience securing containers and Kubernetes platforms, preferably EKS or an equivalent platform • Knowledge of threat modeling, secure design, vulnerability management, security testing, risk assessment, monitoring, and incident response • Ability to evaluate security-control effectiveness using evidence, operational feedback, exceptions, findings, and relevant metrics • Demonstrated experience building, operating, or contributing to security measurement and analysis capabilities • Working knowledge of identity and access-control concepts, including authentication, authorization, privileged access management, identity governance, zero-standing privilege, workload and non-human identities, and secrets management • Working knowledge of software supply-chain security concepts, including SBOMs, artifact signing, provenance, dependency management, secure registries, and CI/CD runner hardening • Working knowledge of foundational AI security concepts, including LLM risks and prompt safety • Ability to own complex work, manage ambiguity, make trade-offs, identify risks, and deliver outcomes across multiple teams • Strong written and verbal communication skills • Preferred: hands-on experience or deep knowledge of AI-security risks and controls, including LLMs, AI agents, MCP, AI gateways, prompt injection defense, sensitive-data leakage, and advanced AI models/tools • Preferred: familiarity with NIST AI RMF, OWASP LLM Top 10, MITRE ATLAS, ISO/IEC 42001, or comparable frameworks • Preferred: certifications such as AWS Security Specialty, CISSP, GIAC, or equivalent practical expertise

🏖️ Benefícios

• Health insurance • Dental insurance • Vision insurance • Paid time off • Company sponsored retirement plan • Some roles may be eligible for the annual company bonus plan • Some roles may be eligible for commissions • Some roles may be eligible for long term incentive awards • Disability accommodations throughout the hiring process • Appeals process for denied accommodations or non-selection decisions

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo