Atlan Stormwater

Security Engineer

• At Atlan, security engineers ship products. If your instinct when you see a recurring finding is to build the system that eliminates it permanently -- not file another ticket -- this role is for you. You'll own AppSec and Cloud Security automation across a platform used by 450+ enterprise customers in regulated industries, with AI as your primary force multiplier.
• AI-Powered Security Agents: Build AI agents that handle vulnerability triage, automated security reviews of PRs, and initial incident forensics at scale. Hands-on production experience is required.
• Cloud Security Automation: Build systems that automatically detect and remediate security gaps across AWS (primary), GCP, and Azure -- configuration drift, IAM misconfigurations, vulnerable dependencies, exposed secrets. You own this end-to-end, not just the detection layer.
• Application Security: Lead threat modeling, security reviews, and risk assessments across web applications, APIs, and services. Work with engineering to eliminate vulnerability classes end-to-end -- writing or reviewing fixes, not just filing findings.
• Developer Security (Shift-Left): Embed security into the developer workflow. Integrate SAST/SCA and secrets detection into CI/CD, making "Secure by Default" the path of least resistance for every engineer on the platform.

Security Engineer – Automation, AI

Compliance

• Compliance program maturity — Lead end-to-end audit execution across SOC 2, ISO 27001, ISO 42001, ISO 27701, HIPAA, and GDPR. Own auditor relationships, coordinate cross-functional evidence collection, and maintain year-round audit readiness.
• Next-generation framework adoption — Drive FedRAMP readiness: assess platform gaps, build roadmaps, and turn new certifications into planned projects rather than fire drills.
• Enterprise risk management — Build and mature Atlan's risk management program. Identify, assess, and track risks across security, operational, compliance, and third-party domains. Turn abstract risk conversations into measurable metrics with clear ownership and quarterly leadership reviews.
• Third-party risk management — Own Atlan's vendor security assessment program end-to-end: tiered vendor reviews, security questionnaires, risk scoring, and ongoing monitoring. Balance vendor risk against business need at scale.
• Compliance automation infrastructure — Integrate our GRC platform with cloud infrastructure, CI/CD pipelines, HR systems, and product engineering tooling to automate evidence collection and continuous control testing. Reduce manual audit prep effort significantly.
• Controls that prove themselves — Partner with engineering and product teams to design technical controls that automatically generate auditable evidence. Implement continuous testing that catches gaps before auditors do.
• Continuous controls monitoring — Design and operate real-time visibility into control effectiveness: automated dashboards, live control status, and alerting that surfaces gaps before audit cycles begin — not during them.
• Organizational compliance capability — Build awareness programs, run training for engineering and cross-functional teams, and create self-service dashboards that make compliance easy. Make secure-by-default the path of least resistance.

Senior GRC Engineer

DevOps Engineer

• Design, build, and own DevOps automation that supports Atlan’s connector ecosystem across Integration Studio.
• Own infrastructure lifecycle workflows — including provisioning, upgrades, teardown, and cost hygiene — for environments used by connector engineers.
• Build self-service tooling that allows engineering teams to spin up and retire environments safely without manual DevOps intervention.
• Develop and maintain Infrastructure as Code using Terraform to manage cloud resources in a consistent, auditable way.
• Operate and support Kubernetes-based runtimes on AWS used for connector execution and ephemeral development and testing environments.
• Solve operational-scale problems such as environment drift, resource sprawl, secrets management, access control, and security boundaries.
• Standardize DevOps patterns and workflows while supporting necessary source- or environment-specific variations.
• Automate upgrades of shared runtimes and dependencies, ensuring minimal disruption to ongoing connector development.
• Improve observability, reliability, and cost efficiency of infrastructure and DevOps workflows.
• Partner closely with connector engineering teams to understand recurring DevOps pain points and translate them into scalable automation and tooling.
• Act as the primary DevOps owner for Integration Studio, setting standards and best practices for how infrastructure is provisioned and operated.

Senior Software Engineer – DevOps

Full-stack Engineer

• Build and evolve production-grade integrations at scale, working across externally built, co-built, and Atlan-owned connectors using Atlan’s App Framework.
• Use AI-assisted development as a first-class tool to accelerate coding, debugging, design iteration, and safe evolution of complex integration systems.
• Own high-impact connectors and enhancements that directly influence customer adoption, expansion, and retention, prioritizing correctness, reliability, and long-term maintainability.
• Synthesize feedback from partner and customer implementations to identify recurring patterns, edge cases, and design gaps — and translate those insights into concrete improvements to connector patterns and the App Framework.
• Work closely with external partners and ecosystem builders on design reviews and technical problem-solving, helping integrations succeed in real-world, production environments.
• Contribute hands-on code to improve scalability, observability, and operability of ingestion workflows and metadata pipelines exercised under real-world load.
• Design and debug long-running, fault-tolerant workflows, working with orchestration systems like Temporal to handle retries, partial failures, and external system variability.
• Raise the engineering bar by championing strong practices around testing, logging, monitoring, and structured debugging across the integration ecosystem.

Security Engineer – Automation, AI

Senior GRC Engineer

Senior Software Engineer – DevOps

Senior Software Engineer – Integration Studio