Senior Security Engineer - Enterprise Security Engineering

Aurora•Seattle, WA

6d•$146,000 - $260,000•Hybrid

About The Position

Aurora is scaling its autonomous trucking operations, and the security foundations protecting our employees, devices, internal systems, and data need to scale with us. We're looking for an experienced security engineer with a strong generalist foundation across enterprise security — someone who can take a well-scoped project from design to implementation, write real automation in Python and Go, and contribute across multiple domains rather than owning one deeply.

Requirements

7+ years of hands-on experience in enterprise/corporate security engineering — specifically employee-facing systems, endpoints, identity, and internal infrastructure
Working proficiency in Python and Go, used for real automation or tooling
Hands-on experience with multiple of the following, with working familiarity across the rest: EDR, IAM, DLP, email security, vulnerability management, network security, PKI
OS security experience across Linux and macOS at minimum; some Windows exposure
Ability to take a scoped project from requirements to shipped, with light guidance rather than close oversight
Exposure to SIEM and detection pipelines (log queries, basic detection logic)

Nice To Haves

Experience with Tailscale, 802.1x, or similar zero-trust network access tooling
Familiarity with HashiCorp Vault or another secrets/PKI platform
Familiarity with cloud technologies and security (e.g. AWS, GCP, Azure)
Familiarity with LLM-based AI tools, including agentic workflows and MCP
NIST CSF / MITRE ATT&CK / CIS Benchmarks familiarity
Industry standard security certifications such as Security+ or CISSP

Responsibilities

Contribute to the design, implementation, and hardening of enterprise security controls across endpoint, identity, network, and data domains
Help configure, tune, and maintain security platforms (EDR, IAM, DLP, PKI, email security)
Write automation and tooling in Python and Go to reduce manual work across one or more of these domains
Support device hardening and endpoint security baselines across macOS, Linux, and Windows
Contribute to network security projects — segmentation, DNS security, VPN/Tailscale, 802.1x
Assist with vulnerability management: triage, prioritization, and remediation tracking
Participate in the team's on-call rotation
Partner with IT and Engineering on scoped security initiatives