Senior Security Engineer (Coud)
Posted Updated
Description
- We are hands-on security engineers helping to build secure, resilient, and scalable web apps, mobile apps, and platform for the real estate industry
- We work with a diverse set of teams to provide and support transparent and automated security tooling and services
- We architect secure web products, perform simulated attacks, identify weaknesses, and work with teams to remediate and protect our products
- You will lead our effort to build security as a service to drive safe-by-default environments and drive customer trust
- This role blends strategic partnership, hands-on engineering, infrastructure security, and automation
- Empower engineers with safe-by-default tooling, ensuring engineering velocity by automating security requirements and building robust guardrails
- Design and implement scalable systems and controls to secure our cloud infrastructure effectively
- Collaborate closely with engineering and security teams to drive the deployment of critical security enhancements and control changes across our cloud infrastructure
- Build enduring, high-trust partnerships with colleagues across the Engineering organization
- Assist in investigating and responding to security events, then work with teams to guide and improve their security practices
- Conduct security assessments for third-party integrations and emerging AI tools, ensuring that business productivity does not compromise data integrity or compliance
- Strong analytical and problem-solving skills, with the ability to critically and objectively assess complex security risks
- You can clearly communicate complex security vulnerabilities and remediation techniques to diverse audiences
- Automation is your default approach to security. You understand the unique challenges of securing systems at scale and consistently leverage automation to solve them
- Experience with threat modeling and architectural review processes; you have a track record of identifying potential attack vectors early in the development lifecycle
- You possess a proactive mindset, adept at identifying and resolving security gaps or inefficiencies through innovative automation and tooling
- You are comfortable guiding and educating development teams to achieve stronger security outcomes
- Expertise in securing cloud platforms, particularly AWS and Azure
- Excited to collaborate with cross-functional teams to build secure, reliable, and scalable systems
- Familiarity with containerization technologies (Docker) and orchestration platforms (Kubernetes)
- Experience: At least 5+ years of experience in a security-related role, with at least 2+ years specifically focused on cloud security
- Strong understanding of cloud platforms and security features, particularly AWS (IAM, EC2, VPC, container services like ECR, ECS, and EKS), with foundational knowledge of Azure and/or GCP
- Technical Skills:
- Strong understanding of Azure services and how to secure them
- Proficiency in at least one programming language (e.g., Python, Go) for automation
- Knowledge of core security principles such as the principle of least privilege, defense-in-depth, and security monitoring
- Proven experience with a CNAPP or similar cloud security tool (e.g., Wiz, Orca Security, Lacework, Upwind)
- Experience with GCP, OCI and multi-cloud networks and infrastructure, especially when designing cloud-agnostic systems