Senior Security Engineer

Novig

1d•$200,000 - $250,000•Hybrid

About The Position

As a Senior Security Engineer, you'll build the systems that make security proactive and scalable: automation pipelines, AI agents, and policy-as-code controls that handle vulnerability management, compliance enforcement, and identity security without requiring constant human intervention. This is a wide-scope, high-ownership role — you'll move across the full breadth of security engineering, anticipate risk before it surfaces, and drive work forward without waiting to be told where to look. What you build here becomes the security foundation that the entire company scales on, and if you want to see your work meaningfully reduce risk across an entire organization, this is that job.

Requirements

Meaningful equity for every employee, regardless of role
100% health premiums covered
99% dental & vision covered
401(k) with 4% company match
HSA + $1,080 annual company contribution
$50/monthly company contribution to employee transit
$27/day lunch stipend when working from our NYC office
$35/day dinner stipend when working from the NYC office after 6:30pm

Nice To Haves

Our work is tied to live sports - that means potential nights, weekends, and pressure included.
If you need clear swim lanes, a heavy process, or someone to tell you what to do, this won’t be the right environment.

Responsibilities

Operate proactively across a wide surface area of security engineering — owning a broad scope and driving work forward without waiting to be told where to look
Build and maintain SOAR workflows and SIEM integrations that automate detection, triage, and response across our infrastructure
Develop AI agents and LLM-powered automation to handle security tasks that would otherwise require continuous manual oversight
Own vulnerability management end-to-end: scanning, prioritization, and automated remediation pipelines
Implement compliance and policy as code, turning security requirements into enforceable, auditable controls
Harden cloud environments and embed security scanning into IaC pipelines (Terraform, CDK, etc.)
Manage and improve IAM systems — access controls, privilege boundaries, and identity lifecycle automation
Integrate and operate MDM/EDR platforms, ensuring endpoint visibility and enforcement at scale
Partner cross-functionally with infrastructure, engineering, and compliance teams to embed security earlier in the development lifecycle