Senior Security Engineer
Top Benefits
About the role
Who you are
- If you're passionate about building robust security programs, love solving complex security challenges, and enjoy elevating security awareness across engineering teams, this role is for you
- 6+ years of software engineering experience with 3+ years in security engineering, application security, or infrastructure security roles, with proven experience building security programs at high-growth technology companies
- Deep cloud security expertise with AWS, Kubernetes, and cloud-native security tools
- Experience securing containerized environments
- Strong application security background including secure code review, vulnerability assessment, penetration testing, and familiarity with OWASP Top 10 and common attack vectors
- Infrastructure security experience with network security, identity and access management (IAM), secrets management, and security automation using infrastructure-as-code
- Strong communication and collaboration skills; able to translate complex security risks into business impact and work effectively with engineering teams to drive security improvements
- Regulatory and compliance knowledge with frameworks like SOC 2, ISO 27001, GDPR, and experience implementing technical controls to meet compliance requirements
What the job involves
- We're looking for a deeply experienced Senior Security Engineer to establish and lead our security engineering function as our first dedicated security engineer hire
- You'll serve as the security champion for our 50+ person engineering organization, partnering closely with our platform, infrastructure, and engineering leadership teams to mature and enhance our existing security posture
- This is a foundational role where you'll have the opportunity to evolve our security strategy, strengthen existing security controls, and establish advanced security practices across our entire technology stack
- You'll drive initiatives that protect our AI-powered platform, customer data, and business operations while enabling safe, high-velocity development
- Evolve and Mature Security Practices: Build upon our existing security foundation by designing and implementing advanced security controls,
- Policies, and practices that scale with our growth and align with industry best practices
- Drive Proactive Security Assessments: Systematically identify security vulnerabilities and weak points across our systems through threat modeling, security reviews, and risk assessments. Develop and execute comprehensive remediation roadmaps
- Partner with Corporate Security: Collaborate closely with our corporate security team to align technical security initiatives with broader organizational security policies, compliance requirements, and risk management objectives
- Secure the Platform & Infrastructure: Work hand-in-hand with our platform and infrastructure teams to harden cloud environments, implement security automation, and build security into our CI/CD pipelines and deployment workflows
- Implement Security Tooling & Monitoring: Deploy and manage security tools including SAST/DAST scanners, vulnerability management systems, security monitoring, and incident response capabilities
- Incident Response & Forensics: Lead security incident response efforts, conduct post-incident analysis, and continuously improve our security incident handling capabilities
Benefits
- 100% Employee Paid Medical, Dental, & Vision
- Work From Anywhere
- 401k plan
- Free Monthly Gigabit Internet For Your Home Office
- Open Vacation Policy
- Paid Parental Leave Up To 16 Weeks
- Work From Home Setup On Us!
- One Medical Membership (including Tele-Medicine)
- Quarterly Swag
- Generous Employee Referral Program
- HSA / FSA Savings Accounts
- Disability Benefits (Short Term & Long Term) Paid By Us!
- Annual Learning Stipend
- Internal Coaching For Leaders
About Qualified.com
For more than a decade, B2B sales and marketing teams have been operating the same way. CMOs spend tons of money to drive qualified leads to your website, and if they want to talk to sales, you ask them to fill out lead capture forms that always end with "Thanks, someone will get back to you shortly." The problem? Buyers move onto other things and sales reps struggle to engage buyers and start the selling process. Simply put, the process that marketing teams use to pass leads to sales is broken.
A new category of software has emerged, and it's called Conversational Marketing. The concept is simple. When qualified leads land on your site, we'll alert your reps in real-time and allow both parties to start a conversation instantly via chat, voice calls, and screen sharing. Conversational marketing is the rare opportunity for your company to completely change the game on how you interact and engage with qualified prospects. Your buyers will be thrilled about the new experience and your business will feel the impact to the metrics that matter most, pipeline and revenue.
Senior Security Engineer
Top Benefits
About the role
Who you are
- If you're passionate about building robust security programs, love solving complex security challenges, and enjoy elevating security awareness across engineering teams, this role is for you
- 6+ years of software engineering experience with 3+ years in security engineering, application security, or infrastructure security roles, with proven experience building security programs at high-growth technology companies
- Deep cloud security expertise with AWS, Kubernetes, and cloud-native security tools
- Experience securing containerized environments
- Strong application security background including secure code review, vulnerability assessment, penetration testing, and familiarity with OWASP Top 10 and common attack vectors
- Infrastructure security experience with network security, identity and access management (IAM), secrets management, and security automation using infrastructure-as-code
- Strong communication and collaboration skills; able to translate complex security risks into business impact and work effectively with engineering teams to drive security improvements
- Regulatory and compliance knowledge with frameworks like SOC 2, ISO 27001, GDPR, and experience implementing technical controls to meet compliance requirements
What the job involves
- We're looking for a deeply experienced Senior Security Engineer to establish and lead our security engineering function as our first dedicated security engineer hire
- You'll serve as the security champion for our 50+ person engineering organization, partnering closely with our platform, infrastructure, and engineering leadership teams to mature and enhance our existing security posture
- This is a foundational role where you'll have the opportunity to evolve our security strategy, strengthen existing security controls, and establish advanced security practices across our entire technology stack
- You'll drive initiatives that protect our AI-powered platform, customer data, and business operations while enabling safe, high-velocity development
- Evolve and Mature Security Practices: Build upon our existing security foundation by designing and implementing advanced security controls,
- Policies, and practices that scale with our growth and align with industry best practices
- Drive Proactive Security Assessments: Systematically identify security vulnerabilities and weak points across our systems through threat modeling, security reviews, and risk assessments. Develop and execute comprehensive remediation roadmaps
- Partner with Corporate Security: Collaborate closely with our corporate security team to align technical security initiatives with broader organizational security policies, compliance requirements, and risk management objectives
- Secure the Platform & Infrastructure: Work hand-in-hand with our platform and infrastructure teams to harden cloud environments, implement security automation, and build security into our CI/CD pipelines and deployment workflows
- Implement Security Tooling & Monitoring: Deploy and manage security tools including SAST/DAST scanners, vulnerability management systems, security monitoring, and incident response capabilities
- Incident Response & Forensics: Lead security incident response efforts, conduct post-incident analysis, and continuously improve our security incident handling capabilities
Benefits
- 100% Employee Paid Medical, Dental, & Vision
- Work From Anywhere
- 401k plan
- Free Monthly Gigabit Internet For Your Home Office
- Open Vacation Policy
- Paid Parental Leave Up To 16 Weeks
- Work From Home Setup On Us!
- One Medical Membership (including Tele-Medicine)
- Quarterly Swag
- Generous Employee Referral Program
- HSA / FSA Savings Accounts
- Disability Benefits (Short Term & Long Term) Paid By Us!
- Annual Learning Stipend
- Internal Coaching For Leaders
About Qualified.com
For more than a decade, B2B sales and marketing teams have been operating the same way. CMOs spend tons of money to drive qualified leads to your website, and if they want to talk to sales, you ask them to fill out lead capture forms that always end with "Thanks, someone will get back to you shortly." The problem? Buyers move onto other things and sales reps struggle to engage buyers and start the selling process. Simply put, the process that marketing teams use to pass leads to sales is broken.
A new category of software has emerged, and it's called Conversational Marketing. The concept is simple. When qualified leads land on your site, we'll alert your reps in real-time and allow both parties to start a conversation instantly via chat, voice calls, and screen sharing. Conversational marketing is the rare opportunity for your company to completely change the game on how you interact and engage with qualified prospects. Your buyers will be thrilled about the new experience and your business will feel the impact to the metrics that matter most, pipeline and revenue.