> Markdown version of [/jobs/ext/264678-senior-security-engineer](https://www.wearedevelopers.com/jobs/ext/264678-senior-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Security Engineer - **Company:** Faro Health, Inc. - **Location:** San Diego, CA, United States - **Experience:** Expert - **Salary:** $123,000.0 - $145,000.0 - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Amazon Web Services, Software System Penetration Testing, Microsoft Azure, Bash Shell, Cloud Computing, Cloud Computing Security, Customer Data Management, Information Leak Prevention, DevOps, Python (Programming Language), Windows PowerShell, Systems Development Life Cycle, Secure Coding, Security Information and Event Management, Software Engineering, Software Vulnerability Management, Scripting, Large Language Models, Software Security, Information Technology, Bicep, CIS Benchmarks, Terraform, Static Application Security Testing, Vulnerability Analysis, Dynamic Application Security Testing - **Published:** May 15, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=2a7bbd7aa73a650b ## About the Role Do you have experience in Vulnerability scanning?, Do you have a Bachelor's degree?, * 6+ years of experience in security engineering, cloud security, or application security roles * 3+ years of hands-on experience with cloud security services (Azure preferred; AWS or GCP acceptable with willingness to ramp on Azure) * Experience with vulnerability management tools and processes, including familiarity with CVSS scoring and risk-based prioritization * Experience with application security testing tools (SAST, DAST, SCA) and secure SDLC practices * Experience with endpoint detection and response platforms * Comfortable working in a small team environment where you will own outcomes end-to-end * Experience in a startup or high-growth environment preferred * Experience with compliance frameworks such as SOC 2, ISO 27001, and NIST 800-53 * Scripting ability in Python, PowerShell, or Bash * Bachelors Degree in Information Technology or related field, Masters Degree Preferred Preferred / Bonus Qualifications * Experience with AI/ML security concepts, including prompt injection, adversarial testing, and LLM-specific attack vectors * Experience with infrastructure as code security (Terraform, ARM/Bicep templates, etc.) * Relevant certifications such as AZ-500, OSCP, GIAC, CISSP or similar * Experience in healthcare, life sciences, or other regulated industries Skills and Competencies * Strong analytical and problem-solving skills with the ability to investigate complex security events * Ability to communicate security risks and recommendations clearly to both technical and non-technical audiences * Self-motivated and able to work independently with minimal supervision * Collaborative mindset, comfortable working directly with engineering, product, and DevOps teams * Willingness to learn new technologies and adapt as Faro's product and infrastructure evolve ## Description The Senior Security Engineer is a hands-on technical role responsible for protecting Faro's cloud infrastructure, applications, and customer data. Reporting to the Sr. Director of Security and Compliance, you will be a core technical contributor to Faro's security program, with significant responsibility for detection and response operations, vulnerability management, application security, and cloud security posture across Faro's cloud environment. You will work closely with engineering, product, and operations teams to embed security throughout the software development lifecycle and ensure the continued trust of Faro's life sciences customers. This is Faro's first dedicated security engineering hire. You will help build out Faro's security capabilities in close partnership with security leadership, contributing to the technical direction of the program and shaping its operations at an early stage of a fast-growing, mission-driven company. In the near term, this role will flex across security, IT, and compliance responsibilities, reflecting the realities of a small team. As the security and IT functions grow, the scope will narrow toward dedicated security engineering. Duties and Responsibilities * Operate and improve Faro's security detection and response capabilities, including monitoring, triage, and investigation of alerts from SIEM, CSPM, and MDR * Manage Faro's vulnerability management program, including triaging findings from infrastructure scans, SAST, DAST, and SCA tools, tracking remediation against established SLAs and coordinating with engineering on fixes * Support and improve application security practices within Faro's SDLC, including security reviews of new features, integration of automated security testing into CI/CD pipelines, and guidance to developers on secure coding practices * Maintain and improve Faro's cloud security posture across multiple cloud providers including configuration reviews, hardening, and alignment with CIS benchmarks * Coordinate and support third-party penetration testing engagements, including scoping, logistics, findings triage, and remediation tracking * Contribute to the security of Faro's AI-powered products, including evaluating risks related to prompt injection, data leakage between tenants, model output safety, and retrieval-augmented generation (RAG) integrity * Support incident response activities in alignment with Faro's NIST 800-61-based incident response plan, including detection, analysis, containment, eradication, and recovery * Contribute to security evidence collection and technical documentation to support SOC 2 Type II, ISO 9001 and ISO 27001/42001 audit cycles * Evaluate and improve security tooling, automation, and processes to scale Faro's security capabilities as the company grows **NOTE: Candidates and Recruiting Agencies, please do not contact our employees regarding the position or your application status. Doing so will automatically disqualify you from the position or working with us. Only applications submitted through the designated link will be considered. Please DO NOT SPAM our employees regarding the role or your application status. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Infrastructure as Code: The Developer's Secret Weapon](https://www.wearedevelopers.com/videos/1221-infrastructure-as-code-the-developer-s-secret-weapon) - [Back(end) to the Future: Embracing the continuous Evolution of Infrastructure and Code](https://www.wearedevelopers.com/videos/440-back-end-to-the-future-embracing-the-continuous-evolution-of-infrastructure-and-code) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [Real-World Security for Busy Developers](https://www.wearedevelopers.com/videos/1545-real-world-security-for-busy-developers) - [Implementing Feature Environments with AWS and Terraform](https://www.wearedevelopers.com/videos/531-implementing-feature-environments-with-aws-and-terraform) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [How Much FAANG Companies Actually Pay Software Engineers in 2025](https://www.wearedevelopers.com/magazine/230-how-much-faang-companies-actually-pay-software-engineers-in-2025)