Senior Security Engineer

Lumos

3d•$155,000 - $200,000•Remote

About The Position

As a Senior Security Engineer at Lumos, you will shape the identity platform used by thousands of IT and security teams to protect their data. You will build security foundations used across Lumos products and serve as a trusted security resource for large customers. The role involves designing and operating production security systems, leading cross-team security projects, assessing new products, improving internal production access controls, responding to vulnerabilities and incidents, and answering security questions from customers and prospects.

Requirements

At least 5 years of software engineering experience, including at least 3 years focused on application, product, or platform security.
A track record of designing, shipping, and operating production security systems, such as authentication and authorization frameworks, token and session management, secrets management, or audit logging.
Strong backend skills.
Clear written communication skills, including the ability to explain risks and trade-offs to engineers, product managers, and customers.
Hands-on experience with threat modeling, secure design reviews, and finding and fixing vulnerabilities in a real codebase.
Experience securing cloud infrastructure on AWS, including IAM and Infrastructure as Code; equivalent GCP or Azure experience is considered.

Nice To Haves

Python and TypeScript skills; Go is also welcome.
Experience with identity protocols such as OAuth 2.0, OIDC, SAML, or SCIM.
Experience with policy engines such as OPA, Zanzibar-style models, or Cedar.
Experience in SOC 2 or ISO 27001 environments.
A general background in IAM.
Experience at a growth-stage startup.

Responsibilities

Design and ship core security platform systems in the Lumos codebase, including request context propagation across services, scoped API tokens, authorization services, and decoupling authentication from synced identities.
Lead multi-sprint security projects end to end and coordinate delivery with engineers across teams.
Conduct security architecture reviews and threat models for new products, and turn findings into tracked, prioritized work.
Drive least-privilege access to production systems, including databases, data pipelines, AWS IAM, and secrets.
Triage, route, and fix vulnerabilities identified through penetration tests, cloud assessments, and dependency scanning, and coordinate retests.
Participate in security on-call and incident response.
Help answer security questions from customers and prospects.

Benefits

Medical, dental, and vision insurance, with 100% of employee premiums and 60% of dependent premiums covered.
HSA and FSA available with employer contribution.
Mental health resources and support.
Monthly wellness stipend for gym memberships, fitness apps, and other wellness needs.
Life insurance and short- and long-term disability coverage.
Flexible PTO with a minimum annual requirement.
Up to 16 weeks of paid parental leave.
$1,000 annual learning stipend for courses, books, conferences, and certifications.
Company and team offsites, fully covered by Lumos.
401(k) with employer matching.
Remote-first culture; work from anywhere within ±4 hours of Pacific Time.
International benefits aligned with local standards.