> Markdown version of [/jobs/ext/1133520-senior-security-engineer](https://www.wearedevelopers.com/jobs/ext/1133520-senior-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Security Engineer

- **Company:** Vanta Incorporated
- **Location:** United States (Remote available)
- **Experience:** Expert
- **Salary:** $227,000.0 - $267,000.0
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Software System Penetration Testing, Software Engineering, Software Vulnerability Management
- **Published:** July 2, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=b7abf8fbfe5d28c9

## About the Role

* A track record of independent ownership of areas of responsibility
 * Experience with threat modeling, red teaming, penetration testing, or other means of identifying security issues
 * Experience with software development and the ability to read code to identify security issues
 * Strong collaboration and communication skills, with deep developer empathy
 * Highly organized project management skills
 * Open to using AI to amplify their skills and strengthen their work - demonstrating curiosity, a willingness to learn, and sound judgment in applying AI responsibly to improve efficiency and impact.

## Description

* Participate in team exercises to identify potential security risks, including threat modeling and tabletop scenarios
 * Contribute to complex prioritization discussions around which risks are the most important to solve next
 * Plan projects to address the risks we prioritize, and coordinate with cross-functional stakeholders across the company to execute those projects
 * Build maintainable programs to implement operational excellence where ongoing work is needed to achieve our goals (e.g. vulnerability management)
 * Partner with engineering teams to architect secure software, address security concerns, and build a strong security culture
 * Build, customize, and run tools to increase the maturity of our security program without adding undue friction to the company's operations
 * Support ongoing bug bounty and penetration testing programs
 * Establish and maintain a network of security champions
 * Understand security knowledge gaps of the development organization and help to deliver training to address gaps
 * Provide input into architectural discussions to enable teams to innovate in a secure and repeatable manner


## Related Videos

- [The Avengers Initiative (Practical Ethics for Software Engineers)](https://www.wearedevelopers.com/videos/2070-the-avengers-initiative-practical-ethics-for-software-engineers)
- [Edit Your Future: Queerverse Radical AI](https://www.wearedevelopers.com/videos/909-edit-your-future-queerverse-radical-ai)
- [What is the real price of one successful line of code?](https://www.wearedevelopers.com/videos/1921-what-is-the-real-price-of-one-successful-line-of-code)
- [Automated Security for the Entire SDLC](https://www.wearedevelopers.com/videos/100323-automated-security-for-the-entire-sdlc)
- [Spot, Squash, Secure: Fighting Security Bugs with GitHub Copilot](https://www.wearedevelopers.com/videos/100052-spot-squash-secure-fighting-security-bugs-with-github-copilot)
- [Software Security 101: Secure Coding Basics](https://www.wearedevelopers.com/videos/220-software-security-101-secure-coding-basics)

## Related Articles

- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)