Lead Security Engineer

Job not on LinkedIn

🔥 5 minutes ago

🌐 United States, Canada – Remote

🇺🇸 United States – Remote 🇨🇦 Canada – Remote

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 15%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Duetto

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2012

✈️ Travel

💼 Consulting

📦 Logistics

💰 $80M Series D on 2018-02

Travel • Consulting • Logistics

Duetto is the world's #1 hotel revenue management system, providing cloud-based, scalable, and easy-to-use software that specializes in dynamic pricing and revenue optimization for the hospitality industry. Trusted globally by hotels, casinos, and resorts, Duetto empowers revenue teams with real-time insights on pricing, forecasting, and demand to maximize profitability and improve operational efficiency. The platform simplifies revenue management, offering tools for multi-property management, analytics, and automation, designed specifically to address the unique challenges faced by hotel operators.

📋 Description

• Own Duetto's overall security posture across cloud, product, infrastructure, IT, compliance, and customer assurance • Lead cloud security across AWS, including IAM, logging, network security, encryption, Kubernetes and container security, backup posture, and configuration risk • Partner with Engineering and DevOps to embed security into the SDLC, CI/CD pipelines, and production operations • Lead vulnerability management end-to-end, including alert triage, posture management, prioritisation, remediation tracking, and reporting • Serve as primary security incident leader for major incidents, investigations, escalations, root cause analysis, and executive reporting • Lead incident response and disaster recovery tabletop exercises, backup testing coordination, and business continuity plan security reviews • Own SOC 2 Type 2, ISO 27001, and ISO 42001 readiness and NIST CSF maturity tracking • Maintain the security risk register, risk treatment plans, security roadmap, and security debt backlog • Partner with Legal and Privacy on DPA, DTIA, DPF, GDPR, SCCs, and subprocessor management • Own customer-facing security assurance, including strategic RFPs, security questionnaires, enterprise security reviews, Trust page content, and sales support calls • Provide security guidance to IT on MDM, endpoint security, AV/EDR coverage, access reviews, and SaaS security controls • Report security posture, risks, incidents, remediation status, and audit readiness to executive leadership

🎯 Requirements

• 8+ years of experience in security, cloud security, DevSecOps, security engineering, infrastructure security, or security operations • Strong hands-on knowledge of AWS, including cloud architecture risk review • Experience securing DevOps environments, CI/CD pipelines, Kubernetes and container environments, cloud IAM, logging, secrets management, and infrastructure-as-code • Experience with SOC 2 Type 2 audits and familiarity with ISO 27001, NIST CSF, and GDPR security requirements • Experience with vulnerability management, penetration testing programmes, and incident response • Ability to translate technical risks into business-level priorities and communicate with Engineering, Legal, Sales, auditors, customers, and executives • Hands-on experience with Snyk, Lacework, Vanta, MDM platforms, endpoint protection, and cloud posture tools • Prior ownership of SOC 2 Type 2 audit readiness end-to-end • ISO 27001 implementation or certification support experience • Experience supporting enterprise SaaS security reviews and customer trust programmes • Familiarity with ISO 42001 or AI governance frameworks

🏖️ Benefits

• Equal opportunity employer committed to diversity and an inclusive environment • Remote work (US/Canada)

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume