Aegis AI - Security Engineer
Requirements
• 4+ years in security engineering, or infrastructure engineering with real security ownership, at a cloud-native company. • You write code. Python, Go or similar, and you'd rather build a guardrail than write a runbook. • Deep in cloud IAM and Kubernetes security: you design for least privilege and short-lived credentials by default, and can walk engineers through the tradeoffs. • Fluent in CI/CD: you've hardened pipelines, not just run tools in them. • You work in the open with engineers: design reviews, pull requests and docs, not tickets thrown over a wall. • You prioritize by real-world risk, not scanner severity, and can explain the call to engineers and leadership alike. • You've secured systems that process email or other high-sensitivity customer data. • You've built a vulnerability management program and automated it end to end. • LLM application security: prompt injection, model pipelines, AI agent guardrails. • Supply chain security: artifact signing, provenance, SBOMs. • Detection engineering, or close partnership with a SOC. • You've worked at a security vendor and know what it means to be the product. • Our Culture • Flat, flexible, and fast. • You'll own your decisions. • You'll have clear KPIs for success — but how you get there is up to you. • If you want your security work to be the reason customers trust the company, and want to work with a team that moves at the speed of the real world, join us.
Responsibilities
• Vulnerability management at the source: Own scanning across code, dependencies, images, cloud config and our external surface; automate the triage, the routing to owners, and the remediation itself wherever it's safe; keep what's left inside our SLAs. • Vulnerability management at the source: • CI/CD security: Own and expand the security gates in our build and deploy pipelines, so vulnerable dependencies and misconfigurations are blocked before they ship. • CI/CD security: • Cloud security posture: Define secure baselines for our cloud estate, detect drift from them, and automate remediation. • Cloud security posture: • Cloud identity and access: Drive least privilege and zero trust by default, across every system, credential and workload we operate. • Cloud identity and access: • Application security: Run design and code reviews and threat modeling for new features and products. • Application security: • Paved roads: Partner with DevOps on reusable, secure-by-default paths for CI/CD, logging and auth, so every new service starts at our baseline and teams ship faster. • Paved roads: • Incident response: Be a technical lead when something needs investigating, and build the tooling that makes the next investigation faster. • Incident response: • Automate: If you do it twice by hand, you build it the third time. • Automate:
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT