Security Engineer

Traversal•New York, NY

18d•$240,000 - $300,000•Onsite

About The Position

Traversal is hiring a senior Security Engineer to raise the company’s security floor by building AI-native security mechanisms suited to its products, cloud infrastructure, and engineering practices. The role partners with security leadership to shape the security roadmap and owns broad-scope projects, including secure foundations for engineers and automated verification that can determine whether changes are safe to ship. It also builds security capabilities into Traversal’s products and cloud infrastructure to protect enterprise customers and their data across multi-tenant environments, BYOC deployments, and multiple compliance regimes. The work spans application behavior, identity, infrastructure, deployment boundaries, data security, and access controls. Traversal welcomes experienced security engineers who want to build as well as software or infrastructure engineers with experience owning security-critical systems. The engineer will independently own foundational security systems end to end, and may set technical direction across related work streams as their scope grows. The position is full-time and in-person in New York, with a stated U.S. base salary range of $240,000–$300,000, plus equity and benefits.

Requirements

4–6+ years building or securing production software or infrastructure at technically rigorous companies or teams, including experience with sensitive, mission-critical systems.
Demonstrated ability to independently lead ambiguous, cross-team security projects from design through implementation, migration, and adoption with minimal structure.
Strong programming skills in a language such as Python, Rust, or Go, and ability to work effectively in an existing codebase.
Hands-on depth in application security or cloud security, with working knowledge of the other; experience may come from a security role or ownership of security-critical systems as a software or infrastructure engineer.
Technical depth in risk assessment; treats standards such as NIST and SOC 2 as starting points rather than necessarily the right baseline.
Practical understanding of authentication, authorization, trust boundaries, secrets, and common failure modes in distributed systems.
Clear written communication and a collaborative approach to technical disagreements.

Nice To Haves

Experience with enterprise customer security requirements.
Experience building on and securing infrastructure-as-code, such as Terraform, and container orchestration systems, such as Kubernetes.
Detection engineering, security telemetry, or automated control validation experience.
Offensive testing experience paired with shipped remediations.
Experience applying formal methods for security.

Responsibilities

Design and ship libraries, defaults, and workflows that make secure engineering practices easy to adopt.
Define and implement controls that continuously verify security properties across products and cloud infrastructure.
Design and ship product security capabilities for enterprise security teams.
Discover and verify security issues, assess risk, coordinate and deliver fixes with system owners, and add tests or controls to prevent recurrence.
Architect security systems and major components, defining interfaces, invariants, and evolution paths for SaaS and BYOC deployments.
Lead multi-phase rollouts, migrations, and deprecations across teams, including sequencing, risk reduction, enablement, and measurable success criteria.
Deliver operationally complete systems with monitoring, high-quality alerts, runbooks, and safe rollout and upgrade paths; debug and resolve security issues in the area of ownership.
Set direction for scoped security domains, connect technical work to customer and business outcomes, and shape follow-up roadmaps with product and engineering leadership.
Mentor engineers and emerging technical leaders, and create patterns, libraries, and reference implementations that others can extend.