Senior Staff Security Engineer (Copy)

Spotnana • Remote US,

5d • $162,600 - $250,000

About The Position

Spotnana is seeking an experienced security engineering leader to lead its Security Engineering team within the global Security organization. The role oversees security engineering for Spotnana’s travel platform and corporate systems and builds a team of security engineers who embed security into the software development process. Security advises Engineering rather than managing it, so the role requires influencing Engineering leaders through clear risk analysis and practical solutions. The position combines hands-on technical work—including design and code reviews—with hiring and developing engineers and translating security strategy into quarterly plans. It reports to the Head of Security & IT.

The role owns the secure software development lifecycle program and standards, security design reviews, finding prioritization, security controls for compliance audits, external penetration testing, security engineering vendor relationships, team capacity planning, and budget proposals. It also reports team performance metrics to Security leadership.

Requirements

• 10+ years of security engineering experience, including 3+ years managing security engineers.
• A record of hiring, developing, and managing the performance of security engineers.
• Deep expertise in at least one of application security, AWS cloud security, or infrastructure security, and working knowledge of the others.
• Experience with a secure SDLC program, including threat models, code and dependency scans, and security checks in CI/CD pipelines.
• Ability to influence without authority and communicate clearly with engineers, executives, and auditors.
• Experience with PCI DSS, SOC 2, or ISO 27001 audits.
• Fluency in at least one programming language, with the ability to review code and build security automation.
• Legally authorized to work in the United States without requiring current or future employment-based visa sponsorship.

Nice To Haves

• Java, Golang, and Python experience.
• Experience with an API-driven, multi-region SaaS platform.
• Familiarity with security risks in Artificial Intelligence and Machine Learning features.
• Experience in travel technology or payments.

Responsibilities

• Hire, develop, and manage security engineers across application, cloud, and infrastructure security.
• Own the Security Engineering plan for the current and following quarter, based on the Security strategy.
• Own the secure software development lifecycle (SDLC) program and standards across Engineering teams.
• Run security design reviews for new features, partner APIs, payment flows, and AI features, and align review service-level agreements with the business.
• Set priorities for fixing security findings based primarily on risk to traveler, payment, and customer data, and escalate overdue critical findings.
• Align security priorities with business and development teams and ensure they remain on the roadmap.
• Own SDLC, change management, and cloud configuration controls in PCI DSS, SOC 2, and ISO 27001 audits in coordination with the GRC team.
• Manage the annual external penetration test and relationships with Security Engineering tool vendors.
• Decide how the team allocates time across projects, design reviews, and findings.
• Propose team headcount, tool, and vendor spending for the annual budget.
• Report team metrics, such as open findings by severity and review cycle time, to Security leadership.
• Review designs and code and build security automation.

Benefits

• Company equity in the form of stock options.
• Pre-tax and Roth 401(k) options with up to a 4% company match.
• Medical, dental, vision, life, and disability plans effective on the hire date; the company covers 100% of employee premiums and 85% of eligible dependent premiums.
• Pre-tax flexible spending account options for health, dependent care, and commuter expenses.
• Flexible PTO, 10 company holidays, and an end-of-year company shutdown.
• Up to 26 weeks of parental leave.
• Monthly cell phone and internet stipend.
• IATAN travel membership, pet insurance, financial wellness tools, Calm app access, and other perks.
• Annual performance bonus.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed