Reuse

Security Engineer

• Run security reviews for new tools, vendors, and projects, including data handling, AI usage, DPAs, PII, authentication/authorization, and third-party security reports
• Own access and infrastructure security, including IAM least-privilege reviews, S3/database access controls, environment segregation, service-to-service authentication, and network configuration audits
• Run vulnerability management across cloud and endpoints and manage IDS/IPS and EDR/MDR tooling
• Lead security incident response end to end: triage, investigate, contain, document, and build runbooks
• Implement and maintain technical controls supporting PCI DSS and SOC 2 / ISO 27001 compliance programs
• Conduct internal audits, risk metrics, and disaster recovery planning
• Partner with DevOps/IT on patch management and secure infrastructure defaults
• Present tooling and risk recommendations to engineering leadership
• Build the in-house AppSec scanning program and evaluate, pilot, and integrate SAST/SCA/IaC tooling into GitLab CI and Jenkins
• Define severity-based remediation SLAs and drive rollout across services
• Build internal security tooling and automation using custom scripts, APIs, Python/boto3, dashboards, and reports
• Build and tune detection pipelines using tools such as Datadome and ELK/Kibana
• Threat-model and penetration-test AI/LLM systems, coordinate external pentests, and drive remediation
• Maintain security policies and practices and drive company-wide training and adoption

Senior Security Engineer