Senior Security Engineer

Emploi pas sur LinkedIn

🕒 il y a 27 jours

🌐 États-Unis, Canada – Distant

🇺🇸 États-Unis – Télétravail 🇨🇦 Canada – Télétravail

🏄 California, Illinois, +3 états de plus – Distant

🏄 California – Remote 🌽 Illinois – Remote 🗽 New York – Remote 🍂 Massachusetts – Remote ☕ Washington – Remote

💵 $145 000 - $175 000 / an

⏰ Temps Plein

🟠 Senior

👮‍♂️ Cybersécurité / Ingénieur Sécurité

🦅 Parrain de Visa H1B

Cette entreprise a parrainé des visas H1B par le passé.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Later

Site WebLinkedInTous les Emplois

51 - 200 employés

Fondée en 2014

📣 Marketing

🛍️ eCommerce

🌍 Impact social

Marketing • eCommerce • Social Impact

À propos de Later (anciennement Latergramme) :

Description

• Assess and continuously improve Later's overall security posture across applications, infrastructure, cloud environments, corporate systems, vendor tooling, and business workflows. • Define and implement scalable security standards, best practices, and guardrails that support SOC 2 readiness through practical, automated, and auditable solutions. • Partner with Engineering, Infrastructure, IT, Product, Legal, People, Finance, and business leaders to align security priorities with company goals, risk reduction, and delivery timelines. • Translate SOC 2 and related compliance requirements into sustainable technical and operational controls, procedures, and evidence collection practices. • Identify security gaps across the company, prioritize remediation efforts, and help teams make pragmatic, risk-based decisions. • Support company-wide security awareness, secure operating practices, and adoption of security controls across business teams. • Build and maintain internal security tools, automation, and services that support secure development, compliance workflows, vulnerability management, corporate security operations, and operational visibility. • Design and implement security controls within CI/CD pipelines, including secure build and deploy patterns, security scanning, dependency management, container scanning, and secret management. • Support application security efforts, including secure design reviews, threat modeling, code review guidance, API security, microservices security patterns, and remediation planning. • Improve cloud infrastructure and corporate systems security through hardening, monitoring, configuration review, Infrastructure-as-Code security scanning, access reviews, and secure operational patterns. • Collaborate with technical and business teams to identify vulnerabilities and control gaps, explain impact clearly, and drive effective remediation. • Strengthen security observability and response readiness through logging, alerting, detection engineering, incident response improvements, and company-wide security process maturity.

🎯 Exigences

• 5-7+ years of experience as a Security Engineer or Software Engineer with a strong security focus. • Proven ability to build and operate production-quality software, automation, and internal tooling. • Strong understanding of application security, infrastructure security, cloud security, secure CI/CD practices, and corporate security controls. • Hands-on experience with vulnerability management, secure software development, threat modeling, remediation workflows, and operational security improvements. • Experience with security frameworks and standards such as OWASP, NIST, CIS Controls, SOC 2, and ISO 27001, and the ability to apply them in production and business environments. • Experience supporting SOC 2 compliance efforts through practical, automated, and auditable controls. • Familiarity with cloud security platforms such as AWS Security Hub, Azure Security Center, or GCP Security Command Center. • Experience with SIEM/SOAR tools, logging and monitoring platforms, detection workflows, and practical incident response processes. • Experience with Infrastructure-as-Code security scanning for tools such as Terraform or CloudFormation. • Ability to translate complex security concepts into clear, actionable guidance for technical and non-technical audiences. • Experience collaborating closely with engineering, IT, compliance, and business teams to improve security outcomes. • Familiarity with C#, modern backend systems, cloud-native architecture, and SaaS business tooling.

🏖️ Avantages

• Health insurance • 401(k) matching • Professional development opportunities • Flexible working hours