About the role

Senior Security Engineer securing AWS infrastructure, production systems, and AI-driven workflows. Building guardrails, vulnerability remediation, monitoring, and incident response for a rapidly scaling platform.

Responsibilities

Secure and harden cloud infrastructure, applications, APIs, internal systems, and operational workflows
Implement and maintain security controls across production environments, CI/CD pipelines, cloud infrastructure, and internal tooling
Work with engineering teams to remediate vulnerabilities and improve secure development practices
Maintain encryption, secrets management, logging, monitoring, and access controls
Design and improve security architecture across cloud-native and distributed systems
Build scalable security processes integrated into engineering and operational workflows
Identify, assess, prioritize, and remediate security vulnerabilities
Conduct vulnerability scanning, penetration testing, adversarial testing, threat modeling, and manual security reviews
Coordinate remediation efforts and validate fixes
Secure AI-driven systems and automated agents against prompt injection, adversarial inputs, unauthorized actions, unsafe outputs, and data leakage
Design guardrails and validation layers for AI-generated actions
Monitor AI behavior for anomalies, abuse attempts, and unsafe decision-making
Improve security monitoring, alerting, logging, and incident response
Investigate suspicious activity, anomalies, and potential security incidents
Lead or support incident response, root cause analysis, and remediation planning
Recommend and implement preventative measures after incidents or security discoveries

7+ years of hands-on experience in security engineering, infrastructure security, application security, DevSecOps, or offensive security
Exceptional knowledge of the AWS ecosystem
Experience identifying and remediating vulnerabilities in live production systems
Ability to drive projects, make decisions, and prioritize in a fast-moving environment
Strong communication skills for explaining technical security issues to engineering stakeholders
Experience securing AI/LLM-powered systems or automated agents preferred
Familiarity with prompt injection attacks, adversarial AI techniques, AI guardrails, and behavioral anomaly detection preferred
Experience with cloud security tooling, SIEM and observability platforms, penetration testing tools, endpoint security platforms, and infrastructure-as-code security preferred
Prior experience in high-growth startup, fintech, banking, or payments environments preferred
Certifications such as CISSP, CISM, AWS Security Specialty, or similar preferred
Ability to work legally in the United States or Canada, with sponsorship status disclosed