Staff Security Engineer

🔥 54 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Auror

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2012

☁️ SaaS

🛒 Retail

🔐 Security

💰 $48.6M Series C - Auror on 2024-11

SaaS • Retail • Security

Auror is a company that provides a cloud-based retail crime intelligence platform. Its SaaS product enables retailers, loss-prevention teams and law enforcement to report and analyze incidents (theft, fraud and organized retail crime), map patterns, share intelligence across organizations, and manage investigations to reduce repeat offending.

📋 Description

• Ship Code in the Platform: Work directly in the Auror codebase — writing patches, fixing vulnerabilities, refactoring weak patterns, and deploying changes. • Build Security Tooling and Automation: Write tools, automation, and detections that scale the security team's impact. • Application Security and Vulnerability Remediation: Lead threat modelling and architecture reviews for major platform changes. • Platform and Infrastructure Security: Partner with SRE and Platform on cloud and infrastructure security. Write Terraform, build pipelines, contribute to platform-as-code. • AI Security and AI-Augmented Engineering: Help define and harden how Auror builds with and defends against AI. • Detection and Response: Partner with the Blue Team workstream to design and tune detections. • Customer Security and Assurance: Be the credible technical voice when enterprise customers need depth. • Standards, Patterns, and Coaching: Set technical direction for security controls, tooling, and architecture.

🎯 Requirements

• A track record of writing production code and shipping changes that landed in real systems used by real users • Comfort working in unfamiliar codebases — reading through to root cause, opening PRs, and partnering with owning teams to get changes merged and deployed • Hands-on experience with cloud platforms (GCP preferred, Azure or AWS welcome), CI/CD pipelines, and infrastructure-as-code (Terraform or similar) • Deep technical understanding of multiple classes of security defects and how to design them out, not just catch them • Strong application security background — threat modelling, architecture review, SAST and DAST, secure SDLC — with the engineering chops to act on what you find • Working knowledge of AI and LLM security concerns — prompt injection, data exposure, model and tool-use supply chain — and a pragmatic view on how to build with AI safely • Comfort and fluency using AI engineering tooling (Claude Code/Gemini or similar) to ship work faster • Experience with SIEM tooling — writing queries, building detections, running log analysis • Comfort partnering with SRE and Platform on production systems and shipping changes alongside them • Strong communication skills — explains the "why" behind security decisions in language engineers respect • Curiosity, low ego, and the ability to lead work independently in ambiguous territory • Models thoughtful, calm decision-making under pressure, especially in incidents.

🏖️ Benefits

• Competitive salary range: $150,000-$170,000, depending on level of experience • Annual bonus: Eligibility for a NZD $5,500 bonus at the end of the financial year if we’ve hit our revenue goals together. • Employee share scheme: You’ll own part of a company making a real difference! • Flexibility: We promote a healthy work/life blend. • Shorter work weeks (at full pay): Everyone gets Friday afternoons off. • Health Care Plan: We prioritise looking after your health by offering cover under our premier health business insurance plan through nib health insurance. • Focus on mental and physical health: We understand how vital our health is and have policies to support your wellness, including Wellness Days, and up to $750 for expert sessions every year. • Family-friendly: We offer comprehensive paid parental leave - 12 weeks for birth parents and 6 weeks for non-birth parents following birth, adoption, or surrogacy. • Personal growth: We support our team to participate in courses, conferences, or events that will help them develop their skills. • Team love: We have regular team lunches and social events where most (if not all) activities are during work hours.