redoxengine - Redox - Senior Security Engineer
Requirements
• 5+ years in security engineering with a track record of hands-on delivery across system hardening, security engineering projects, and peer mentorship. • Strong technical proficiency in Kubernetes security, specifically network policy orchestration, admission control (Kyverno), and container hardening protocols. • Experience with threat modeling for applications built using Node.js, TypeScript, Python or Go. • Hands-on experience supporting secure SDLC practices and CI/CD safeguards using GitHub Actions, ensuring artifact validity and pipeline integrity. • Direct experience hardening Infrastructure-as-Code (Terraform) and managing enterprise secrets via AWS Secrets Manager, Vault, or similar platforms. • Solid experience across the vulnerability management lifecycle, from initial triage to production remediation. • Ability to apply compliance frameworks like HITRUST and SOC 2 into pragmatic technical controls that align with engineering workflows. • Strong written communication skills, with the ability to clearly document decisions and collaborate effectively within a remote, asynchronous organizational culture. • Proficiency in AI tools and techniques, including prompt engineering and hands-on experience across multiple large language model platforms, with a demonstrated ability to automate workflows using AI. • ## Our stack - you'll be hands-on with these: • AWS, Docker, EKS • Crowdstrike, Jamf, Okta, GuardDuty, Sumologic • Kyverno, Karpenter, KEDA, VPA, Velero, Crossplane • Github Actions, Terraform, Helm, ArgoCD and Atlantis • Experience securing autonomous agentic loops and tool-calling frameworks. Understanding of Indirect Prompt Injection and designing "Human-in-the-Loop" guardrails for agent-driven actions. • Technical familiarity with securing the Model Context Protocol (MCP), specifically regarding context isolation, sandboxing, and identity propagation between LLMs and private data sources. • Hands-on application of the NIST AI RMF, OWASP Top 10 for LLMs, etc within a production environment. • Go, Node.js, or TypeScript (we're a TypeScript shop and it helps to be comfortable there). • VPN administration or enterprise network security experience. • Dependency management tooling (Renovate, Dependabot).
Responsibilities
• Own Cloud Security Posture Management including Kubernetes and Container security practices, admission control, network policies, image integrity, and environment hardening. • Manage comprehensive vulnerability lifecycles, prioritizing remediation based on actual production exposure rather than simplistic finding metrics. • Collaborate with Platform Engineering to support secure SDLC and CI/CD safeguards, focusing on artifact validity and pipeline integrity. • Convert HITRUST and SOC 2 compliance frameworks into actionable technical configurations and operational controls. • Evaluate and secure infrastructure-as-code across all environments. • Execute incident response duties, encompassing forensic investigation and the facilitation of blameless post-mortem analyses. • Contribute to security standards within Engineering through design reviews, collaborative pairing, and mentorship of peers. • Support bug bounty triage and maintain professional engagement with external security researchers.
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT