We are looking for a hands-on Senior or Staff Software Engineer to lead security initiatives for our client. You will maintain a strong security posture while enabling fast-paced development, focusing on product security, secure architecture, and internal tooling to eliminate vulnerabilities at the source.
Responsibilities
- Design and build shared libraries, platform guardrails, and internal tools that make the secure path the easy path for engineers.
- Review architecture, technical designs, and production code for security issues in product and platform systems.
- Perform pragmatic threat modeling for new features, workflows, services, and integrations.
- Improve core security patterns across the stack, including authentication, authorization, secrets handling, secure logging/redaction, auditability, and sensitive-data protections.
- Build or improve developer-facing security automation in CI/CD and local workflows.
- Partner directly with product and platform engineers to remediate vulnerabilities with durable fixes.
- Help define and evolve a lightweight secure SDLC suitable for a fast-moving startup.
- Contribute to incident analysis and postmortems.
- Write clear documentation and examples to help teams build securely.
Qualifications
8+ years of experience as a senior IC software engineer specializing in security or software engineer who pivoted into security and can still push code to infrastructure vs. pure scripting
Deep AWS security experience (IAM, VPC, GuardDuty, KMS).
Terraform and/or Pulumi proficiency - you can read and contribute to infrastructure-as-code, and you understand the security implications of what you’re reviewing
Hands-on experience with SOC 2 (designing controls, managing audits).
Strong written communication for documenting risks and runbooks.
Experience with secure design, threat modeling, and code review.
Proficiency in authentication, authorization, and secrets management.
Ability to work in a startup environment with broad ownership and pragmatic decision-making.
Excellent communication skills for partnering with cross-functional engineering teams.
Washington D.C., District of Columbia, United States