Lead Security Engineer – Cloud Security, Architecture

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

HighLevel

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2018

☁️ SaaS

🤝 B2B

💰 Series A on 2021-11

SaaS • Marketing • B2B

HighLevel is an all-in-one marketing and sales platform designed to help businesses grow and succeed. The platform consolidates various marketing tools into a single solution, providing features such as lead capture through landing pages, surveys, forms, and calendars, as well as tools for nurturing leads via automated messaging across multiple channels including phone, SMS, email, and social media. HighLevel offers customizable solutions like online appointment scheduling, multi-channel follow-up campaigns, and pipeline management. Additionally, businesses can build websites, funnels, and landing pages using the intuitive page builder. HighLevel supports integrating with existing systems via API, and offers a membership platform for community building and course management. The platform is targeted towards marketers and offers white-labeling options for businesses to brand the software as their own. With a community-driven development approach and award-winning support, HighLevel is focused on empowering businesses to streamline their operations and enhance their marketing efficiencies.

📋 Description

• Demonstrated expertise in cloud security architecture across AWS/GCP/Azure, including designing secure, scalable cloud environments with a strong focus on identity, network security, encryption, and compliance best practices. • Extensive experience conducting security architecture reviews for distributed systems and cloud-native applications, identifying design risks early and recommending secure, scalable architectural patterns aligned with business and engineering goals. • Perform and lead manual and automated penetration testing across applications, APIs, and cloud services • Drive threat modeling and secure architecture reviews across app and infrastructure layers • Collaborate with Infra/DevOps on cloud network architecture, including VPC design, security groups, routing, and segmentation • Design and advise on cloud-native security controls — IAM hardening, role boundaries, secrets management, least privilege • Evaluate and improve Kubernetes and container security posture (runtime, image, and network layers)Implement secure-by-default patterns across SDLC, CI/CD, and Infrastructure-as-CodeMonitor emerging threats, CVEs, and vulnerabilities relevant to our stack (web, cloud, infra) • Influence internal security tooling, automation pipelines, and security review processes • Serve as a security advisor to engineering, SRE, and product teams across key projects

🎯 Requirements

• 8+ years of experience in Application Security, Product Security, or Cloud Security, with a strong focus on securing large-scale cloud-native applications. • Strong hands-on experience with **threat modeling**, **secure architecture reviews**, and **pen testing** • Familiar with **OWASP Top 10**, STRIDE, and modern security frameworks • Experience with tools like **Burp Suite, ZAP, Snyk, Metasploit, Semgrep** • Ability to read and analyze code (e.g., **JavaScript, Go, PHP, or ****Node.js**)Working knowledge of **cloud security principles** (preferably AWS)