Senior Security Engineer - US
- Location
- Remote (US)
- Job type
- Full-time
- Level
- Senior
- Experience
- 5+ years
- Listed
- 23 days ago
Skills & highlights for this role
- AWS security
- Terraform
- Kubernetes/EKS security
- Golang
Also useful
- Terragrunt
- CrowdStrike
- Wiz
- Security Hub
- Google Workspace
Stated benefits & perks
- Health
- 401k match
- Parental leave
- Unlimited pto
About the Role
We're hiring a Senior Security Engineer to work side-by-side with our engineering team, embedding security into how we build and ship - not bolting it on after the fact. You'll partner with engineers on design reviews, help harden the platform as it grows, and build the tooling and automation that lets security scale without slowing anyone down. You'll report to our VP of Information Security and have real autonomy to identify problems and build the solutions yourself and in collaboration with engineering.
This is a builder's role. In addition to use of vendor tools, you'll be writing code and infrastructure that turns security and compliance work into repeatable, self-service processes for the business helping to automate and improve what's manual today, closing gaps in how we detect and respond to issues, and giving engineering the guardrails and feedback loops they need to move fast safely.
What You'll Do
Partner with Engineering on Platform Security
- Work directly with engineering on design and architecture reviews, threat modeling, and secure-by-default patterns for new services
- Review and harden IaC across our cloud environments (EKS, Aurora, OpenSearch, S3, IAM)
- Lead least-privilege IAM decomposition and drive adoption of stronger identity patterns across the platform
- Support disaster recovery testing and resilience exercises alongside the infrastructure team
Build Tooling That Scales Security
- Design and build automation that turns detection, response, and compliance work into repeatable processes rather than manual effort
- Improve and extend onboarding/offboarding automation, alert triage pipelines, and identity/access anomaly detection
- Build internal tools that give engineering fast, self-service ways to check their own security posture
What You'll Bring
- 5+ years in security engineering, with real depth in AWS security and Infrastructure-as-Code (Terraform/Terragrunt strongly preferred)
- Firm working knowledge of Kubernetes/EKS security - RBAC, network policies, pod security standards, image scanning, and cluster hardening
- Strong written communication - you'll document your own work, since we're a small, high-trust team
- A track record of building tools or automation that solved a security problem at scale, not just running existing tools
- Previous use of tools like Crowdstrike, Wiz, Security Hub
- Experience with golang
- Comfortable working directly with software engineers - in code reviews, design discussions, and incident response
- Incident investigation and RCA tracking
- Experience supporting a SOC 2 (or similar framework) program from the technical/evidence side
- Experience with Google Workspace as an identity/IdP source of truth
- Self-directed: you'll often be the only engineer working a problem end to end
Preferred Qualifications
- Exposure to offensive security or red/purple teaming
- Familiarity with Aurora or managed OpenSearch specifically
What We Offer
We believe people do their best work when they feel supported, trusted, and valued. VulnCheck offers benefits designed to meet a wide range of needs and lifestyles, tailored to your country of employment:
- Generous, flexible time off
- Retirement/pension plan contributions (e.g., 401k with match in the US; local pension schemes elsewhere)
- Comprehensive healthcare coverage
- Generous paid parental leave
- Remote-friendly environment with flexibility
- Support for home office costs (phone & internet)
Specific benefit details vary by country and are confirmed during the offer process.
About VulnCheck
Exploitation prevention is only as strong as the intelligence driving those efforts, and most of the industry is still running on intelligence that lacks exploit context. VulnCheck, The Exploit Intelligence Company, delivers structured exploit intelligence on what is actively weaponized in the wild, purpose-built for the data lakes, ETL pipelines, automation, and AI and LLM workflows your infrastructure already runs on, raising the capability of everything it powers.
Why Join Us
Built on over two decades of cybersecurity experience, our team of experts understands the intricacies of vulnerabilities, their exploitation in the wild, and how to leverage this data to build more effective cybersecurity products that produce better outcomes for organizations.
VulnCheck gives organizations a tactical advantage by providing best-in-class exploit & vulnerability intelligence information. We have a sense of duty to protect the critical infrastructure we rely on including medical devices, power grids and telecommunication networks. We were founded in 2021 in Lexington, Massachusetts.
VulnCheck has a transparent, collaborative, and supportive culture - we are looking for people who have a growth mindset, are curious and innovative. Our team is smart, but humble, hardworking, and supportive.
Equal opportunity and legal notices
VulnCheck is proud to be an Equal Employer Opportunity employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.
VulnCheck is committed to working with and providing reasonable accommodations to applicants with physical and mental disabilities. *Even if your experience doesn't perfectly align with the job description, we encourage you to apply-we value potential just as much as a perfect resume.
From VulnCheck's careers page, first listed on Rolev.ai on October 17, 2026. Rolev.ai is not the employer.
How Rolev.ai helps with this application
Rolev.ai is a job search and application tool for US job seekers. For this Senior Security Engineer - US role at VulnCheck, it shows how your resume fits, tailors your resume to the posting, and prepares the application for you to review.
See how you fit
Openings from employer career sites are ranked against your whole resume—and searchable inside Claude, ChatGPT, and Cursor via Rolev.ai MCP.
Tailor without inventing
Every change to your resume is checked against your original. New experience goes in only with your yes—zero fabricated claims.
Draft the full kit
Tailored and Full Match resumes, role-specific cover letters, and answers to employer screening questions are prepared in seconds.
1-Click Extension Autofill
The Chrome extension fills the employer's Greenhouse, Workday, Lever, or Ashby form in 1 click. You review it and press Submit.
Similar roles
All Information Security Engineer jobs- Associate, Information Security EngineerING · New York City, NY
- Zero Trust Technical LeadCACI · Mclean, VA
- Cyber Systems Engineer - Level 3 or 4 (AHT)Ngc · Aurora, CO · $125k – $188k/yr
- Sr. Cybersecurity Engineer (ISSE)Applied IS · Huntsville, AL
- Principal Identity & Access Management (IAM) EngineerEarly Warning · Chicago, IL
- Lead InfoSec Engineer, Vulnerability ManagementSpgi · New York, NY · $125k – $145k/yr
Common questions
Where is the Senior Security Engineer - US job at VulnCheck located?
Yes, this Senior Security Engineer - US opening at VulnCheck is listed as Remote (US). Always check VulnCheck's application page for specific state eligibility or relocation policies.
What qualifications are required for Senior Security Engineer - US at VulnCheck?
For the Senior Security Engineer - US role, VulnCheck highlights 5+ years of relevant experience; experience with AWS security, Terraform, Kubernetes/EKS security, Golang. Rolev.ai can score your existing resume against these requirements and show any skill gaps before you apply.
How do I apply for the Senior Security Engineer - US position at VulnCheck?
This listing links directly to VulnCheck's Greenhouse application page. You can apply directly on VulnCheck's site, or use Rolev.ai to check your resume fit, generate a zero-hallucination tailored resume and cover letter for this posting, and autofill the Greenhouse application form in 1 click with the Rolev.ai Chrome extension. You always review the form and press Submit yourself.