Senior Security Engineer

Moloco • Redwood City, CA

1d

About The Position

We are seeking a Senior Security Engineer to strengthen the security posture of our cloud infrastructure and applications. This role is critical to proactively identifying and reducing risk, automating security controls, and ensuring Moloco’s platforms remain secure, resilient, and compliant as the business scales.
As a Senior Security Engineer, you will partner closely with DevOps, platform, and application teams to embed security into day-to-day engineering workflows. You will help shift security left, reduce operational risk, and enable teams to move fast without compromising security.

Requirements

• 5+ years of experience as a Security Engineer or in a similar role with a strong foundation in CI/CD, automation, and cloud infrastructure
• Strong understanding of cloud security principles (AWS, GCP, or Azure)
• Experience securing CI/CD pipelines (e.g., GitHub Actions, GitLab CI, Jenkins, Harness)
• Familiarity with infrastructure-as-code and related security tools
• Proficiency in scripting languages (Python, Bash, etc)
• Hands-on experience with container security (e.g., Docker image scanning, Kubernetes best practices)
• Knowledge of IAM, secrets management, and secure key handling
• Experience with vulnerability scanning, remediation workflows, and risk prioritization.
• Ability to identify and mitigate misconfigurations in cloud and IaC environments
• Comfortable collaborating with DevOps, platform, and application teams

Nice To Haves

• Familiarity with compliance frameworks (SOC 2, ISO 27001, NIST, etc.)
• Experience with security monitoring and incident response processes
• Exposure to SIEM or EDR tools (e.g., Splunk, CrowdStrike, Google SecOps)
• Experience with SAST/DAST and dependency scanning tools
• Familiarity with zero-trust networking concepts
• Knowledge of threat modeling and risk assessment practices

Responsibilities

• Embeds automated security testing (SAST/DAST) into CI/CD pipelines to identify vulnerabilities early.
• Implements safeguards across infrastructure-as-code, containers, and cloud environments to minimize risk from misconfigurations or unintended use.
• Automates vulnerability scans and real-time threat responses to reduce risks. Participate in security triage and vulnerability management process.
• Ensures adherence to standards like SOC 2 or GDPR within DevOps processes.
• Automates manual security tasks, accelerates development, and reduces delays caused by late-stage fixes.
• Builds robust defenses against evolving threats with incident response playbooks and threat intelligence.

Benefits

• We take care of you and create the conditions for you to do the best work of your career. We offer innovative benefits that empower our employees to take care of themselves and their families so they can do the best work of their lives.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed
• Number of Employees: 501-1,000 employees