Security Engineer

🕒 July 1

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Drivetrain

WebsiteLinkedInAll Job Openings

11 - 50 employees

💼 Consulting

📣 Marketing

💸 Finance

Consulting • Marketing • Finance

Drivetrain is a strategic finance platform that offers AI-powered FP&A (Financial Planning and Analysis) software designed to accelerate planning, tracking, and forecasting. It empowers finance teams globally to create board-ready reports, analyze trends, manage integrations, and make informed decisions with real-time data. The platform supports cross-functional collaboration, allowing departments such as RevOps, sales, customer success, HR, and marketing to access and utilize critical financial data seamlessly. With features like customizable graphs, charts, and models, Drivetrain enhances financial modeling, forecasting, and decision-making capabilities for enterprises.

📋 Description

• Design, implement, and maintain security controls across cloud infrastructure (AWS/GCP), CI/CD pipelines, and internal systems • Lead application security efforts: threat modeling, secure code review, and integrating SAST/DAST tooling into the development lifecycle • Own vulnerability management — triage, prioritize, and drive remediation of findings from scans, pen tests, and bug bounty reports • Monitor for and respond to security incidents; build and maintain incident response runbooks • Manage identity and access controls (SSO, RBAC, least-privilege enforcement) across internal and customer-facing systems • Support customer security questionnaires, audits, and certifications (e.g., SOC 2, ISO 27001) • Partner with engineering teams to embed secure-by-design practices into new features and services • Evaluate and implement security tooling (secrets management, endpoint protection, cloud security posture management) • Educate the broader team on security best practices and champion a security-first culture

🎯 Requirements

• 2+ years of experience in security engineering, application security, or a related infrastructure/security role • Strong understanding of cloud security fundamentals (AWS or GCP), network security, and IAM • Experience with secure SDLC practices — code review, dependency scanning, CI/CD pipeline security • Familiarity with common frameworks and standards (OWASP Top 10, SOC 2, ISO 27001, GDPR) • Hands-on scripting/automation skills (Python, Go, or similar) for building internal security tooling • Experience responding to and documenting security incidents • Clear communicator who can translate security risk into terms non-security stakeholders understand • Experience securing a SaaS product handling sensitive financial data (nice to have) • Prior experience leading a SOC 2 Type II or ISO 27001 audit from the engineering side (nice to have) • Familiarity with container security (Docker/Kubernetes) and IaC scanning (Terraform) (nice to have) • Relevant certifications (OSCP, CISSP, CCSP) — nice signal, not required