Senior Security Engineer

Seesaw

32d•$160,000 - $188,000

About The Position

Seesaw is seeking a Senior Security Engineer who is, first and foremost, an exceptional software engineer with deep expertise in security. This role is not a governance-only or leadership-only position. The successful candidate will be expected to write code, review architecture, shape the SDLC, and work closely with the engineering team while also owning the strategic direction of the security program. This role is ideal for a senior engineer who has organically grown into security. The position is not a CISO or pure security leadership role, and does not require managing a security team or extensive meeting attendance. Instead, the focus is on leading by doing, setting standards by example, bringing pragmatic security thinking to all layers of the stack, and helping to build a scalable security culture.

Requirements

7+ years of hands-on software engineering experience
Strong experience in application security (threat modeling, code review, SDLC integration)
Experience securing cloud environments (AWS, GCP, or Azure), including IAM and networking
Ability to operate both strategically and tactically—setting direction while staying hands-on
Strong communication skills; able to translate security concepts into clear, actionable guidance

Nice To Haves

Experience with compliance frameworks (SOC 2, ISO 27001)
Familiarity with security tooling (SAST, DAST, SCA, SIEM, vulnerability management)
Experience building security programs in startup or high-growth environments
Relevant certifications (CISSP, CCSP, CSSLP, OSCP), though not required

Responsibilities

Own and drive the company’s security strategy, roadmap, and overall posture
Serve as the internal expert on security best practices and risk management
Partner cross-functionally to ensure security is embedded across engineering, product, IT, and legal
Lead threat modeling, secure code reviews, and architecture reviews
Define and enforce secure coding standards and vulnerability management processes
Drive adoption of SAST, DAST, SCA, and other security tooling
Build and maintain security tooling, automation, and infrastructure as code
Implement security controls across application, API, and infrastructure layers
Partner with engineers on authentication, authorization, and data protection
Own vulnerability scanning, patching, and incident response processes
Strengthen cloud security (IAM, networking, secrets, logging, monitoring)
Integrate security into CI/CD pipelines and automate security gates
Partner with Legal to develop and maintain security policies and standards
Lead or support compliance efforts (e.g., SOC 2, ISO 27001)
Stay ahead of evolving regulatory requirements