Senior Security Engineer

Infinite Edge•New York City, NY

8d•Onsite

About The Position

IcyBox is hiring a Senior Security Engineer to protect the company, its customers, and their data. The role owns security across applications, cloud infrastructure, and internal systems, and helps the team build securely without slowing down. It is based in person at IcyBox’s New York City office five days a week.

Requirements

At least 5 years of experience in security engineering, application security, or cloud security.
Hands-on experience securing AWS environments.
Strong understanding of web and mobile application security, including the OWASP Top 10.
Ability to read and write code in at least one language, such as Rust, Python, Go, or TypeScript.
Experience leading incident response.
Ability to explain risk clearly and give engineers practical fixes.

Nice To Haves

Experience working with production Rust, React, and React Native systems.
E-commerce or payments security experience, including PCI DSS.
Experience with fraud, bot, and account takeover prevention.
Experience with SIEM tools and detection engineering.
Certifications such as OSCP, CISSP, or AWS Certified Security – Specialty.
Experience as the first security hire or on an early security team at a startup.

Responsibilities

Find and fix vulnerabilities across mobile, web, and backend applications.
Secure the AWS environment, including access management, networking, and secrets.
Conduct threat modeling and security reviews for new features.
Build security checks into CI/CD, such as code scanning and dependency checks.
Lead incident detection and response, including logging, alerting, and playbooks.
Follow security news and share relevant information with the team.
Prevent account takeover, bots, and abuse on the site and app.
Manage penetration tests, bug bounty reports, and vendor security reviews.
Support compliance work such as PCI DSS and privacy laws.
Train engineers on secure coding.