Senior Security Engineer - US

VulnCheck is hiring a Senior Security Engineer to embed security into engineering practices and harden its platform. The role partners with engineering on secure design, builds security automation and self-service tooling, and supports detection, response, and compliance processes.

Responsibilities:

• Work directly with engineering on design and architecture reviews, threat modeling, and secure-by-default patterns for new services
• Review and harden IaC across our cloud environments (EKS, Aurora, OpenSearch, S3, IAM)
• Lead least-privilege IAM decomposition and drive adoption of stronger identity patterns across the platform
• Support disaster recovery testing and resilience exercises alongside the infrastructure team
• Design and build automation that turns detection, response, and compliance work into repeatable processes rather than manual effort
• Improve and extend onboarding/offboarding automation, alert triage pipelines, and identity/access anomaly detection
• Build internal tools that give engineering fast, self-service ways to check their own security posture

Requirements:

• 5+ years in security engineering, with real depth in AWS security and Infrastructure-as-Code (Terraform/Terragrunt strongly preferred)
• Firm working knowledge of Kubernetes/EKS security — RBAC, network policies, pod security standards, image scanning, and cluster hardening
• Strong written communication — you'll document your own work, since we're a small, high-trust team
• A track record of building tools or automation that solved a security problem at scale, not just running existing tools
• Previous use of tools like Crowdstrike, Wiz, Security Hub
• Experience with golang
• Comfortable working directly with software engineers — in code reviews, design discussions, and incident response
• Incident investigation and RCA tracking
• Experience supporting a SOC 2 (or similar framework) program from the technical/evidence side
• Experience with Google Workspace as an identity/IdP source of truth
• Self-directed: you'll often be the only engineer working a problem end to end
• Terraform/Terragrunt strongly preferred
• Exposure to offensive security or red/purple teaming
• Familiarity with Aurora or managed OpenSearch specifically