Staff Security Engineer
Core
Scale and mature security across platform, infrastructure, and development workflows for a SaaS claims processing engine serving large insurers.
Role type
Staff Security Engineer (IC)
Builds
Secure cloud-native infrastructure, CI/CD security automation, security observability pipelines, and incident response capabilities.
Domain
Insurance technology / Cloud Security / DevSecOps
Required skills
Application security, Cloud security (AWS), DevSecOps pipelines, Security automation, Threat modeling, Penetration testing, Security telemetry/SIEM, Kubernetes/Container security, Infrastructure as Code, Security frameworks (CIS/NIST/SOC2)
Preferred skills
SaaS architectures, Distributed systems, Internet-facing platforms, Security detections, Threat intelligence, Runtime protection
Technologies
AWS, Python, Typescript, Terraform, Ansible, Kubernetes, SIEM, SAST, DAST, IaC scanners
Responsibilities
Lead security architecture and design reviews, Conduct penetration testing and threat modeling, Design security automation in CI/CD, Partner on cloud platform security, Build security observability and detection capabilities, Lead incident response investigations, Own bug bounty program, Develop security standards and training programs, Define security roadmap
Seniority
Staff, strategic IC with mentorship
