Senior Security Engineer

Job not on LinkedIn

🔥 1 hour ago

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 12%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Agora

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 2014

🔌 API

🤝 B2B

API • B2B

Agora is a pioneer and global leader in Real-Time Engagement Platform-as-a-Service (PaaS), providing developers with simple, flexible, and powerful APIs, to embed real-time voice, video, interactive live-streaming, chat, whiteboard, and artificial intelligence capabilities into their applications. The company focuses on video, APIs, and real-time communication technologies.

📋 Description

• Partner with Engineering and Product throughout the development lifecycle, from early design and threat modeling through launch and ongoing operation • Perform security reviews of system designs, application code, APIs, infrastructure as code, cloud environments, Kubernetes workloads, deployment pipelines, and production configurations • Identify vulnerabilities and design weaknesses, communicate their impact, and work with engineers on pragmatic remediation • Serve as a security subject-matter expert for application security, cloud and container security, identity and access management, secrets management, API security, data protection, and secure software development • Develop reusable security guidance, secure patterns, review checklists, and engineering standards • Administer and improve security tooling, including AI-assisted security tools, SAST, DAST, software composition analysis, container and infrastructure-as-code scanning, CSPM, and security monitoring • Integrate security controls into developer workflows and CI/CD pipelines; tune rules, reduce noise, improve coverage, and ensure findings lead to action • Translate threat models and known attack paths into logging, monitoring, and detection requirements • Identify telemetry gaps across application, cloud, identity, infrastructure, and blockchain-related systems • Design, implement, test, document, and tune security alert rules and detection logic • Triage and investigate security detections, correlate activity across data sources, and determine scope, impact, severity, and response • Work with the SOC to improve alert quality, escalation criteria, investigation procedures, and response runbooks • Participate in security incident response, including investigation, containment, eradication, recovery, stakeholder coordination, and evidence preservation • Lead or contribute to post-incident reviews and implement durable improvements • Own day-to-day execution of the vulnerability management program, including intake, validation, prioritization, assignment, remediation tracking, exception management, verification, and reporting • Support third-party penetration tests, code reviews, architecture assessments, and independent security engagements • Assess security implications of new vendors, technologies, integrations, and architectural changes • Build automation and metrics to improve security visibility and reduce investigation and remediation time • Contribute to product security, platform security, detection engineering, vulnerability management, and incident-readiness roadmaps

🎯 Requirements

• 5+ years of hands-on experience in product security, application security, cloud security or a closely related security engineering role • Strong software engineering fundamentals and ability to review application code • Experience with TypeScript, Node.js, JavaScript, or another modern language • Experience reviewing web applications, backend services, REST APIs, authentication and authorization systems, and relational database designs • Practical knowledge of application and API vulnerabilities, threat-modeling techniques, secure design principles, and modern identity patterns • Experience securing AWS environments, containerized workloads, Kubernetes, infrastructure as code, and CI/CD or GitOps workflows • Hands-on experience with SAST, DAST, SCA, CSPM, container scanning, secrets detection, infrastructure-as-code scanning, SIEM, or cloud-native detection platforms • Experience developing or tuning security detections using application, cloud, identity, network, and infrastructure telemetry • Strong investigation skills, including log and system-activity analysis, hypothesis development and testing, timeline creation, and scope and impact assessment • Experience working with SOC on alert escalation, investigation handoffs, runbook development, and detection-quality improvement • Experience participating in security incident response • Experience operating a vulnerability management process and driving remediation across multiple engineering teams • Ability to evaluate findings and detections based on exploitability, confidence, and business impact • Experience working with external penetration testers, auditors, or specialist security reviewers • Strong written and verbal communication skills • High autonomy and sound judgment • Collaborative, low-ego approach to security • Preferred: experience securing fintech, payments, digital-assets, or high-assurance financial platforms • Preferred: familiarity with blockchain systems, smart-contract integrations, transaction flows, custody models, signing infrastructure, or cryptographic key management • Preferred: experience with TypeScript, Pulumi, AWS, Argo CD, Cloudflare, PostgreSQL, Prometheus, or Grafana • Preferred: experience with incident-response tooling, security data pipelines, log normalization, detection-as-code, or automated enrichment and response • Preferred: experience defining security metrics • Preferred: experience designing controls for distributed, event-driven, multi-tenant, or high-availability systems • Preferred: ability to create security automation, internal tools, or CI/CD integrations using code • Preferred: experience applying AI-assisted tools to security investigations, detection engineering, or secure development • Preferred: relevant offensive-security, incident-response, and cloud-security experience or certifications

🏖️ Benefits

• Equal Employment Opportunity Employer • Diverse, inclusive, and equitable workplace

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume