Senior Security Engineer
New
L
LumosIdentity security
Location: United States; Workplace: Remote, Work from anywhere within ±4 hours of Pacific Time.Full-TimeSenior
Salary$155,000 - $200,000 plus equity + benefits
Apply NowOpens the employer's application page
Job Details
- Experience
- 5+ years of software engineering experience, with at least 3 focused on security (application, product, or platform security).
- Required Skills
- PythonTypeScript
Requirements
- Have 5+ years of software engineering experience, including at least 3 years focused on application, product, or platform security.
- Have a track record of designing, shipping, and operating production security systems, such as authentication and authorization frameworks, token and session management, secrets management, or audit logging.
- Bring strong backend skills; Python and TypeScript are strong pluses, and Go is welcome.
- Have hands-on experience with threat modeling, secure design reviews, and finding and fixing vulnerabilities in a real codebase.
- Have experience securing cloud infrastructure on AWS, including IAM and Infrastructure as Code; equivalent GCP or Azure experience is considered.
- Communicate risks and trade-offs clearly to engineers, PMs, and customers.
- Nice to have: experience with OAuth 2.0, OIDC, SAML, or SCIM.
- Nice to have: experience with policy engines such as OPA, Zanzibar-style models, or Cedar.
- Nice to have: experience in SOC 2 or ISO 27001 environments, a background in IAM, or growth-stage startup experience.
Responsibilities
- Design and ship core security platform systems, including request context propagation across services, scoped API tokens, authorization services, and decoupling authentication from synced identities.
- Lead multi-sprint security projects end to end and coordinate delivery with engineers across teams.
- Run security architecture reviews and threat models for new products, and turn findings into tracked, prioritized work.
- Drive least-privilege access to production databases, data pipelines, AWS IAM, and secrets.
- Triage, route, and fix vulnerabilities identified through pentests, cloud assessments, and dependency scanning; coordinate retests.
- Participate in security on-call and incident response.
- Answer security questions from customers and prospects.
View Full Description & ApplyYou'll be redirected to the employer's site
