Senior Software Engineer, Security

Job not on LinkedIn

🔥 4 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

AssemblyAI

WebsiteLinkedInAll Job Openings

51 - 200 employees

💼 Consulting

📣 Marketing

📦 Logistics

💰 $30M Series B on 2022-07

Consulting • Marketing • Logistics

AssemblyAI is an API platform specializing in state-of-the-art AI models, particularly in the field of speech recognition and understanding. The company closely monitors advancements in AI research to enhance its production-ready models. Developers and product teams leverage AssemblyAI's API for various applications, including transcription, conversation intelligence, summarization, and audio/video content moderation. The introduction of their framework, LeMUR, allows users to effectively apply powerful language models to transcribed speech, further broadening the capabilities of their offerings.

📋 Description

• Conduct threat modeling and security design reviews for new features, services, and architectural changes • Perform secure code reviews focused on authentication, authorization, input handling, secrets management, and data protection • Deploy and maintain SAST, SCA, DAST, secret scanning, IaC scanning, and CI/CD security guardrails • Promote secure-by-default libraries, frameworks, paved-road patterns, and developer guidance • Partner with platform engineering on AWS hardening, Terraform reviews, network segmentation, and environment isolation • Contribute to security incident investigation, root cause analysis, and post-incident hardening • Drive vulnerability triage, prioritization, remediation tracking, and metrics reporting • Respond to customer and vendor security questionnaires, RFP security sections, and trust-and-safety inquiries with sales and legal • Support SOC 2, ISO 27001, PCI 4.0, and other compliance audit cycles • Monitor and respond to endpoint, cloud, and application security alerts • Execute user access reviews, IAM hygiene tasks, and RBAC maintenance • Maintain security runbooks, process documentation, and operational playbooks; build automation where possible

🎯 Requirements

• 5+ years of experience in security engineering, security operations, or a related combined role • Hands-on experience with SOC 2, ISO 27001, or PCI compliance audit cycles • Strong application security fundamentals, including threat modeling and secure code review • Familiarity with OWASP Top 10 and CWE vulnerability classes • Experience with SAST, SCA, DAST, secret scanning, or IaC scanning • Working knowledge of AWS infrastructure and services, including IAM, VPC networking, and security configurations • Familiarity with infrastructure-as-code and CI/CD pipeline security; Terraform preferred • Proficiency in Python and ability to read backend service code • Strong written communication skills for audit documentation, security questionnaires, policies, and runbooks • Comfort using AI-assisted development tools such as Claude Code or Copilot • Nice-to-have: AI/ML security, endpoint and cloud security tooling, SIEM detections, vulnerability management, security incident handling, startup experience, or security certifications

🏖️ Benefits

• Competitive equity grants • 100% employer-paid benefits • Fully remote flexibility • 401k match up to 4% for all US-based full-time team members