Senior Security Engineer

Job not on LinkedIn

🔥 14 minutes ago

🌏 Anywhere in the World

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 12%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Kestra

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2022

☁️ SaaS

🤖 Artificial Intelligence

🏢 Enterprise

SaaS • Artificial Intelligence • Enterprise

Kestra is an open-source orchestration platform for data, AI, and infrastructure workflows. It is event-driven, language-agnostic, and built for enterprise scale, offering declarative YAML workflows, an API-first design, CI/CD-native features, and 1800+ plugins to integrate cloud, data, infra and SaaS tools. Kestra ships as self-hosted (Docker/Kubernetes) and a managed cloud edition, and provides enterprise capabilities (SSO, RBAC, audit logs, multi-tenancy, isolated workers) alongside AI-native features like RAG pipelines, agents, and a Copilot to operationalize and govern AI workflows.

📋 Description

• Conduct hands-on penetration testing and threat modeling across the web application, APIs, control plane, and cloud environments • Manage end-to-end vulnerability tracking across codebases, software dependencies, container images, and cloud infrastructure • Fix security flaws by writing patches, submitting pull requests, or collaborating with product teams on remediation • Audit and harden GCP, Kubernetes clusters, and networking configurations • Automate SAST, DAST, and dependency scanners into CI/CD pipelines • Perform security code reviews and evaluate third-party dependencies, open-source integrations, and supply-chain risks • Lead incident response and establish continuous monitoring, detection, and mitigation strategies

🎯 Requirements

• 5+ years of experience in Security Engineering, Product Security, DevSecOps, or a combined Offensive/Defensive role • Strong hands-on penetration testing background, with proven ability to discover application, API, and network-level vulnerabilities • Ability to read code, understand exploits, write fixes, or provide clear remediation steps to engineers • Deep familiarity with cloud security (AWS or GCP) and containerized environments (Kubernetes, Docker) • Experience with dependency and supply-chain security, CVE management, open-source licensing, and SCA tools • Fluent in English • Comfortable working autonomously in a fully remote environment • Adaptability to a fast-paced open-source startup environment

🏖️ Benefits

• Work from anywhere • Access to coworking spaces worldwide • Medical, dental, and vision coverage • Home office equipment provided