Sr. Security Engineer

About the role

We are seeking a Senior Security Engineer to lead and advance the security tooling that tests and validates our software against compliance and cybersecurity standards. In this role, you will ensure our toolchain is consistently enforced, highly trustworthy, and continuously enhanced as our products, customer base, and regulatory requirements expand. You will also be a key early contributor as we design and implement our application security and security operations functions.

You will be the technical authority for how security checks are configured, tuned, and enforced across our software development lifecycle (SDLC). You will translate compliance and Risk Management Framework (RMF) requirements into automated, risk-based controls that give engineers fast, actionable feedback early in development. Your expertise in AI-based automation will be key to success. The goal is a pipeline calibrated to the speed of organizational need: secure by default, automated wherever possible, and supported by clear human review when automation flags risk.

On the other end of the SDLC, you will help implement automated and manual pen-testing and other security-related testing capabilities across a range of deployment environments. You will help develop our security operations capabilities with faster and more automated incident response and incident management. Applying an AI-first approach to these functions will enable faster, more efficient, higher-quality outcomes.

This role supports regulated and security-sensitive environments, including systems hosted for Government customers, and partners closely with engineering, product, and cybersecurity leadership.

Core Responsibilities Own and evolve the security toolchain

-

Serve as the technical owner of our pipeline security tooling, including static application security testing (SAST), software composition analysis (SCA), secrets detection, container scanning, and artifact signing

-

Assess tooling effectiveness and coverage, identify gaps, and recommend and lead improvements, consolidation, or replacement as needs evolve

-

Develop automated and manual pen-testing capabilities with rapid feedback loops into the engineering process.

-

Help mature the security operations and incident response capabilities of the company.

-

Define the long-term roadmap for security tooling and processes in partnership with Cybersecurity and Engineering leadership

Tune controls to compliance requirements

-

Translate National Institute of Standards and Technology (NIST) SP 800-53, NIST SP 800-171, and RMF control requirements into enforceable pipeline gates, thresholds, and policies

-

Evolve and maintain risk-based pass/fail criteria that balance security assurance with delivery speed and minimize false positives

-

Ensure tooling outputs produce assessor-ready evidence that supports authorizations, continuous monitoring, and audits