Senior Security Engineer (Cloud & AppSec)
Get the 10 highest-paying security jobs every Monday
Straight from the employer, salary shown. Free.
We confirm your address first. One-click unsubscribe in every email.
- 5,659 open jobs checked on Oct 24
- Every job links to the employer's own hiring page
- No recruiters or staffing agencies
See a sample
This week's email
The 10 highest-paying security jobs this week
- Engineering Manager, Hardware Platform SecurityAnthropic · San Francisco, CA$485k–625k/yr
- Chief Information Security OfficerMETR · Berkeley$493k–579k/yr
- Manager, Cybersecurity Sales SpecialistAnthropic · San Francisco, CA$450k–550k/yr
- Senior Director, Privacy, Product and Platform SecurityRoblox · San Mateo, CA$458k–526k/yr
- CISOGlean · Mountain View, CA$424k–489k/yr
Top 5 of 10 shown. Pay as posted by each employer. Then: new roles this week, cleared roles and remote picks.
Find my job matches, 30 seconds.
About airSlate airSlate is a global SaaS technology company that develops no-code workflow automation, electronic signature, and document management solutions. Our award-winning products - SignNow, pdfFiller, DocHub, altaFlow, Instapage, and US Legal Forms - serve over hundreds of millions of users...
Show full description
About Cloud and Security team:
Our security team protects user data and keeps the airSlate platform stable. We work closely with product, engineering, and operations teams to reduce security risks at every stage, from design to production. We also monitor threats, run system audits, and help everyone in the company follow secure work practices.
And now, we are looking for a Senior Security Engineer (Cloud & AppSec) who is prepared to contribute to the next chapter of our company's growth.
The person will join our Security Engineering team of five and take on the responsibility of keeping our cloud infrastructure and products secure.
As Senior Security Engineer, you will help product and engineering teams build secure products, find and fix risks early, and respond quickly when something goes wrong.
What you'll be working on:
- Secure our AWS and GCP environments: access management (IAM, least privilege, workload identities), network segmentation, encryption, and key and secrets management
- Find and fix cloud misconfigurations and security risks before they cause problems
- Set up security logging and monitoring, and investigate suspicious activity
- Test the security of our web, mobile, and network-based applications
- Run and improve our security scanning tools (SAST, DAST, SCA) and connect them to CI/CD pipelines
- Help teams build secure products from the start by joining architecture reviews, threat modeling sessions, and risk assessments
- Explain security findings clearly and work with engineers until the issues are fixed
- Handle security incidents of different kinds (application, infrastructure, user-related): investigate, triage, contain, and write post-mortems
- Prepare for SOC 2 and CASA audits and external assessments together with product and compliance teams
- Configure and monitor our CDN
- Work alongside a small, experienced, and proactive team that solves complex problems together
What we expect from you:
- 4+ years of professional experience in information security, application security, or a related field
- Hands-on experience securing AWS and/or GCP
- Practical experience with SAST, DAST, and SCA tools, including choosing, setting up, and integrating them into CI/CD
- Experience in security testing of web, mobile, or network applications
- Experience in incident response, from investigation to post-mortem
- Good knowledge of secure development practices across the SDLC, including threat modeling
- Working knowledge of Bash, Python, Go, or Terraform
- Clear communication skills and the ability to explain risks so that teams act on them
- English at B2 level or higher, written and spoken
What helps you rock:
- Experience preparing for compliance audits such as SOC 2, CASA, PCI DSS, or NIST CSF
- Previous experience as a DevOps engineer or developer
Hiring for this role? Feature it
Source: airSlate on Lever. FortHire is not the employer and doesn't take applications. Report a problem or request removal.