Senior Security Engineer - US

VulnCheck

11h • Remote

About The Position

VulnCheck is hiring a Senior Security Engineer to embed security into how its engineering team builds and ships products. Reporting to the VP of Information Security, this role partners with engineers on design and architecture reviews, hardens the growing platform, and builds tooling and automation that make security and compliance work repeatable and self-service. The engineer will identify problems and develop solutions independently and collaboratively, improving manual processes, detection and response, and the guardrails and feedback loops that help engineering move quickly and safely.

The role focuses on AWS and cloud platform security, infrastructure as code, Kubernetes/EKS, identity and access management, security automation, incident investigation, and technical support for compliance programs. VulnCheck describes its environment as remote-friendly and flexible. Benefit details vary by country of employment and are confirmed during the offer process.

Requirements

• At least 5 years of experience in security engineering, with substantial depth in AWS security and infrastructure as code.
• Working knowledge of Kubernetes/EKS security, including RBAC, network policies, pod security standards, image scanning, and cluster hardening.
• Strong written communication and the ability to document work.
• A track record of building tools or automation that solve security problems at scale, rather than only operating existing tools.
• Experience with tools such as CrowdStrike, Wiz, or Security Hub.
• Experience with Golang.
• Comfort working directly with software engineers in code reviews, design discussions, and incident response.
• Experience with incident investigation and RCA tracking.
• Experience supporting a SOC 2 or similar framework program from the technical/evidence side.
• Experience with Google Workspace as an identity/IdP source of truth.
• Self-direction and ability to work through problems end to end.

Nice To Haves

• Terraform or Terragrunt experience is strongly preferred.
• Exposure to offensive security or red/purple teaming.
• Familiarity with Aurora or managed OpenSearch.

Responsibilities

• Partner with engineering on design and architecture reviews, threat modeling, and secure-by-default patterns for new services.
• Review and harden infrastructure as code across cloud environments, including EKS, Aurora, OpenSearch, S3, and IAM.
• Lead least-privilege IAM decomposition and drive stronger identity patterns across the platform.
• Support disaster recovery testing and resilience exercises with the infrastructure team.
• Design and build automation that makes detection, response, and compliance work repeatable rather than manual.
• Improve and extend onboarding and offboarding automation, alert triage pipelines, and identity/access anomaly detection.
• Build internal tools that enable engineering teams to check their security posture through self-service.
• Document work, collaborate with software engineers in code reviews and design discussions, and support incident response.
• Support incident investigation and root-cause-analysis tracking.
• Support the technical and evidence aspects of a SOC 2 or similar framework program.

Benefits

• Generous, flexible time off.
• Retirement or pension plan contributions, such as a 401(k) with match in the US or local pension schemes elsewhere.
• Comprehensive healthcare coverage.
• Generous paid parental leave.
• Remote-friendly environment with flexibility.
• Support for home office costs, including phone and internet. Benefit details vary by country of employment.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed