Senior Security Engineer

MOXFIVE

13d • $180,000 - $240,000

About The Position

MOXFIVE is seeking a Senior Security Engineer to join its founding engineering team and own security for the platforms, cloud environments, and AI systems customers rely on during cyber-attacks. The role spans cloud infrastructure, AI platforms, and the corporate environment, including endpoints, identity, email, and business applications.

The Senior Security Engineer will build detection and response capabilities for MOXFIVE’s environment, improve cloud and container security posture, secure the software supply chain, and establish controls that demonstrate to customers and partners how their data is protected. The role requires balancing protection of highly sensitive data with enabling engineering teams to work efficiently, and emphasizes shipping security through code and automation.

Requirements

• At least 6 years of hands-on security engineering experience, including at least 3 years securing production cloud environments.
• Deep experience securing workloads on major public cloud platforms, including identity and access management, network segmentation, encryption and key management, logging, and organization-level guardrails.
• Production experience securing container orchestration platforms and containerized workloads, including image hardening, admission control, and runtime protection.
• Hands-on experience with cloud security posture management, vulnerability prioritization, and cloud workload protection.
• Hands-on experience with enterprise EDR and XDR platforms, including policy tuning, detection triage, and response.
• Experience building detections and conducting investigations across cloud, identity, and endpoint telemetry.
• Strong understanding of identity security, including SSO, MFA, conditional access, and least-privilege access for engineers and service accounts.
• Experience securing CI/CD and the software supply chain, including static analysis, secret scanning, infrastructure-as-code scanning, dependency risk, and artifact integrity.
• Infrastructure-as-code experience and ability to fix findings rather than only file tickets.
• Proficiency in Python or Go for automation, tooling, and detection engineering.
• Experience with secrets management at scale.
• Experience securing corporate IT, including device management, endpoint hardening, and email and SaaS application security.
• Sound judgment when handling sensitive, privileged, and regulated data.

Nice To Haves

• Experience in incident response, DFIR, or a managed detection and response environment.
• Experience securing LLM and agentic AI systems, including prompt injection defenses, action authorization, and isolation of untrusted execution.
• Experience with Zero Trust access architectures.
• Experience with multi-tenant SaaS isolation and third-party integrations.
• Working knowledge of SOC 2, ISO 27001, or similar frameworks, with a preference for controls that are automated and continuously evidenced.
• Offensive security, red team, or cloud penetration testing experience.
• Relevant certifications such as OSCP, GCIH, GCFA, or cloud security specialty certifications.

Responsibilities

• Own security across cloud infrastructure, AI platforms, and the corporate environment, including endpoints, identity, email, and business applications.
• Build detection and response capabilities for MOXFIVE’s environment.
• Drive cloud and container security posture to a defensible state.
• Secure the software supply chain.
• Establish controls that demonstrate to customers and partners how their data is protected.
• Automate security guardrails and address security findings through infrastructure as code and engineering changes.
• Build tooling, automation, and detections using Python or Go.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed