Senior Security Engineer

Job not on LinkedIn

🕒 August 18

🏄 California, Colorado, +4 more states – Remote

🏄 California – Remote ⛰️ Colorado – Remote 🎰 Nevada – Remote 🏖️ New Jersey – Remote 🌲 North Carolina – Remote 🤠 Texas – Remote

💵 $170k - $215k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Reuse

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2017

💼 Consulting

🛡️ Insurance

📦 Logistics

Consulting • Insurance • Logistics

Reuse is a financial technology company that offers users a complimentary service to view and refresh their credit scores daily. The platform provides tools to help individuals understand their credit score, access credit card offers, loans, and insurance products tailored to their financial needs. Additionally, Reuse features educational resources on building credit and improving financial health, allowing users to take actions that may enhance their credit profiles.

📋 Description

• Run security reviews for new tools, vendors, and projects, including data handling, AI usage, DPAs, PII, authentication/authorization, and third-party security reports • Own access and infrastructure security, including IAM least-privilege reviews, S3/database access controls, environment segregation, service-to-service authentication, and network configuration audits • Run vulnerability management across cloud and endpoints and manage IDS/IPS and EDR/MDR tooling • Lead security incident response end to end: triage, investigate, contain, document, and build runbooks • Implement and maintain technical controls supporting PCI DSS and SOC 2 / ISO 27001 compliance programs • Conduct internal audits, risk metrics, and disaster recovery planning • Partner with DevOps/IT on patch management and secure infrastructure defaults • Present tooling and risk recommendations to engineering leadership • Build the in-house AppSec scanning program and evaluate, pilot, and integrate SAST/SCA/IaC tooling into GitLab CI and Jenkins • Define severity-based remediation SLAs and drive rollout across services • Build internal security tooling and automation using custom scripts, APIs, Python/boto3, dashboards, and reports • Build and tune detection pipelines using tools such as Datadome and ELK/Kibana • Threat-model and penetration-test AI/LLM systems, coordinate external pentests, and drive remediation • Maintain security policies and practices and drive company-wide training and adoption

🎯 Requirements

• 7+ years of hands-on security engineering experience across application security, cloud security, and network/penetration testing • Independent experience driving tooling or architecture decisions and defending recommendations to leadership • Self-directed, pragmatic, and highly prioritization-focused • Experience building production automation from scratch, including API integrations, custom collectors, or internal tooling • Hands-on experience deploying and running open-source security tools such as Burp Suite Community/OWASP ZAP, Nmap, Nuclei, Metasploit, Semgrep, Trivy, Wazuh/OSSEC, ELK/Kibana, Prowler/ScoutSuite, and HashiCorp Vault, or similar • Solid AWS security experience • Working knowledge of PCI DSS, SOC 2, and ISO 27001 sufficient to implement controls and support audits • Ability to threat-model emerging systems such as AI/LLM applications • Excellent communication skills for translating cost/coverage tradeoffs and technical risk to engineers and executives • BS in Computer Science or related field, or equivalent hands-on experience • U.S. work authorization required; applicants must reside in CA, CO, NC, NJ, NV, or TX • Bonus: OSCP, GPEN, or similar certifications; bug bounty experience; or experience securing LLM/AI-based systems

🏖️ Benefits

• Equity in a pre-IPO company backed by top VCs • Comprehensive medical, dental, and vision insurance • Monthly home office stipend • Professional development program • Flexible paid time off • 10 paid holidays • Additional 6 Sesame Wellness days • Culture emphasizing total wellness and work-life harmony