Security Engineer

Auger•Bellevue, WA

About The Position

Build at Auger Auger is the autonomous operating system for supply chains. It connects enterprise supply chain systems—ERP, WMS, TMS—into a single data layer, then uses AI to detect problems, evaluate trade-offs, and execute decisions automatically. The platform eliminates the coordination tax: the time and capital lost when disconnected systems force humans to become the integration layer between planning and execution. Actions that previously required days of meetings and manual coordination happen in seconds, within constraints the customer defines. Founded by Dave Clark and backed by $100M from Oak HC/FT. Headquartered in Bellevue, Washington. About the Team & Role As a Security Engineer at Auger, you will own the definition and implementation of security measures to protect our products and data throughout their lifecycle. You’ll be responsible for securing our cloud infrastructure, performing incident response, and helping our development teams build our platform securely.

Requirements

Degree in Cyber Security, Computer Science, Engineering, IT, or related field.
5+ years of experience in a security engineering role.
Strong understanding of security principles, practices, and technologies.
Experience with threat modeling, risk assessment, and security testing.
Knowledge of security standards and frameworks (e.g., ISO 27001, NIST, OWASP).
Excellent communication and collaboration skills.
Ability to work independently and as part of a team.

Responsibilities

Cloud Infrastructure Security: Design, audit, test, and implement cloud security controls.
Define cloud security requirements and standards for product development.
Collaborate with cross-functional teams to integrate security into product roadmaps.
Risk Assessment and Management: Conduct threat modeling and risk assessments to identify potential security vulnerabilities.
Prioritize and manage security risks, ensuring timely mitigation.
Implement security controls in our products and educate developers on best practices to minimize risks.
Incident Response: Triage, investigate, and help remediate security incidents.
Help develop incident response runbooks and detection rules.
Participate in incident retrospectives to improve future security outcomes.
Security Testing and Validation: Develop and execute security testing plans, including penetration testing and vulnerability assessments.
Collaborate with QA teams to ensure security testing is integrated into the development lifecycle.
Validate security controls and ensure compliance with security standards.
Secure Software Development Lifecycle: Design and implement controls to secure the Auger’s software supply chain.
Build security into CI/CD pipelines.
Help developers triage and remediate static analysis findings.
Implement dynamic analysis tooling and automated triage pipelines.