> Markdown version of [/jobs/ext/3757098-security-engineer](https://www.wearedevelopers.com/jobs/ext/3757098-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Engineer

- **Company:** Nerdy (nyse: Nrdy)
- **Location:** St. Louis, MO, United States (Remote available)
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Amazon Web Services, Cloud Computing, Cloud Computing Security, Cyber Security, Cursor, Identity and Access Management, Intrusion Detection and Prevention, Python (Programming Language), Network Security, PostgreSQL, Software Vulnerability Management, Data Logging, Application Enhancement Tool, GitHub Copilot, Claude Code, Git, Information Technology, Claude, Api Management
- **Published:** October 15, 2026
- **Apply:** https://www.juju.com/job/16_62a94726

## About the Role

* 5+ years in Security Engineering, Cloud Security, or Infrastructure.
 * Experience securing Netlify, Supabase, or similar modern platform-as-a-service environments.
 * Working knowledge of cloud infrastructure, IAM, endpoint security, and network security.
 * Demonstrated ability to build maintainable python services and API integrations, including validation, error handling, tests, and git-based review with documentation.
 * Experience using AI tools for security purposes with tools like Cursor, GitHub Copilot, Claude, or similar.
 * Solid understanding of cybersecurity frameworks (e.g., NIST, SOC 2, ISO 27001), risk, and compliance.
 * Hands-on experience with threat detection, vulnerability management, and incident response.
 * Proven track record of independently owning and delivering complex, ambiguous projects from start to finish.
 * Ability to influence engineering and product teams and drive security adoption without formal authority.
 * Clear written and verbal communication, including the ability to explain technical risk to non-technical stakeholders.
 * Bachelor's in CS, Information Security, or related field (advanced degree/certs preferred).

## Description

From the CEO to day-one hires, everyone builds and ships with generative AI. If you're not wielding AI, you're not done.

 * Entrepreneurial velocity
Move at founder speed, prototype in hours, and measure in real user outcomes. Slow teams die.

 * Free-market rigor
Ideas rise or fall on merit and results - no committees, no politics, no cap on upside.

 * Full-stack ownership
You design, build, and run what you ship; accountability is a feature, not a bug.

 * Reward for contribution
Pay rises with impact, not years. Outstanding results earn outsized rewards. We evaluate both what you achieve and how you achieve it: living our leadership principles and using AI effectively are formally measured and rewarded.

 * Relentless exploration
Push the frontier of generative AI in live learning and - because only the paranoid survive - questioning every legacy assumption along the way.

 * Is Apolitical
You stay focused on mission-aligned outcomes, not distractions or unrelated causes.

If you're a technically minded builder who thrives on open competition, personal responsibility, and the chance to redefine how the world learns - while continually stretching the limits of what generative AI can do - come do the most ambitious and rewarding work of your career here. Learn more at nerdy.com.

Nerdy's shareholder letters below explain our latest products and strategy:

 * Q2-2026 Shareholder Update
 * Q1-2026 Shareholder Update
 * Q4-2025 Shareholder Update, * Own security projects end to end, from scoping and design through implementation, rollout, and ongoing operation, with minimal oversight.
 * Design and implement secure, scalable, and resilient architecture across AWS, Netlify, and Supabase.
 * Build and operate threat detection, logging, and monitoring, and serve as a primary responder in security incidents, including investigation, containment, and post-incident review.
 * Run vulnerability management: triage findings, prioritize by risk, and drive remediation with engineering teams.
 * Identify and close security gaps created by the rapid adoption of new tools and platforms.
 * Implement and maintain controls that support regulatory, privacy, and data protection compliance, and contribute evidence and technical input to audits.
 * Contribute to business continuity and disaster recovery planning by owning specific workstreams such as backup validation, recovery testing, and tabletop exercises.
 * Use AI-powered tools (e.g., Cursor, Claude Code, or equivalent) to build security guardrails, automate checks, and accelerate security workflows.
 * Partner with Engineering, Product, Legal, and People teams to embed security controls into how they work, influencing through technical credibility and clear communication.
 * Evaluate, deploy, and operate security tooling and IT systems, and support vendor security reviews.