> Markdown version of [/jobs/ext/3776187-security-engineer](https://www.wearedevelopers.com/jobs/ext/3776187-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Engineer - **Company:** VULNCHECK INC. - **Location:** United States (Remote available) - **Experience:** Expert - **Salary:** $145,000.0 - $220,000.0 - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Amazon Web Services, Amazon S3, Computer Vision, Cloud Computing, Code Review, Cyber Security, Computer Networks, Extract Transform Load (ETL), Identity and Access Management, Role-Based Access Control, Reinforcement Learning, Cloud Platform System, Large Language Models, Prompt Engineering, Build Management, Data Lakes, Kubernetes, Information Technology, Gsuite, Software Coding, Terraform, OpenSearch, Golang - **Published:** October 16, 2026 - **Apply:** https://www.builtincolorado.com/auth/login?destination=/job/senior-security-engineer-us/11711204 ## About the Role * 5+ years in security engineering, with real depth in AWS security and Infrastructure-as-Code (Terraform/Terragrunt strongly preferred) * Firm working knowledge of Kubernetes/EKS security - RBAC, network policies, pod security standards, image scanning, and cluster hardening * Strong written communication - you'll document your own work, since we're a small, high-trust team * A track record of building tools or automation that solved a security problem at scale, not just running existing tools * Previous use of tools like Crowdstrike, Wiz, Security Hub * Experience with golang * Comfortable working directly with software engineers - in code reviews, design discussions, and incident response * Incident investigation and RCA tracking * Experience supporting a SOC 2 (or similar framework) program from the technical/evidence side * Experience with Google Workspace as an identity/IdP source of truth * Self-directed: you'll often be the only engineer working a problem end to end Preferred Qualifications * Exposure to offensive security or red/purple teaming * Familiarity with Aurora or managed OpenSearch specifically ## Description Be an Early Applicant Remote Hiring Remotely in US Senior level Remote Hiring Remotely in US Senior level Build and scale platform security through architecture reviews, threat modeling, IaC hardening, IAM improvements, Kubernetes security, and disaster recovery exercises. Develop automation for detection, response, compliance, onboarding, access anomaly detection, and self-service security posture checks. Investigate incidents, track root-cause remediation, support SOC 2 evidence collection, and collaborate closely with software engineers on secure development and incident response. The summary above was generated by AI Senior Security Engineer - USAbout VulnCheck Exploitation prevention is only as strong as the intelligence driving those efforts, and most of the industry is still running on intelligence that lacks exploit context. VulnCheck, The Exploit Intelligence Company, delivers structured exploit intelligence on what is actively weaponized in the wild, purpose-built for the data lakes, ETL pipelines, automation, and AI and LLM workflows your infrastructure already runs on, raising the capability of everything it powers., We're hiring a Senior Security Engineer to work side-by-side with our engineering team, embedding security into how we build and ship - not bolting it on after the fact. You'll partner with engineers on design reviews, help harden the platform as it grows, and build the tooling and automation that lets security scale without slowing anyone down. You'll report to our VP of Information Security and have real autonomy to identify problems and build the solutions yourself and in collaboration with engineering. This is a builder's role. In addition to use of vendor tools, you'll be writing code and infrastructure that turns security and compliance work into repeatable, self-service processes for the business helping to automate and improve what's manual today, closing gaps in how we detect and respond to issues, and giving engineering the guardrails and feedback loops they need to move fast safely. What You'll Do Partner with Engineering on Platform Security * Work directly with engineering on design and architecture reviews, threat modeling, and secure-by-default patterns for new services * Review and harden IaC across our cloud environments (EKS, Aurora, OpenSearch, S3, IAM) * Lead least-privilege IAM decomposition and drive adoption of stronger identity patterns across the platform * Support disaster recovery testing and resilience exercises alongside the infrastructure team Build Tooling That Scales Security * Design and build automation that turns detection, response, and compliance work into repeatable processes rather than manual effort * Improve and extend onboarding/offboarding automation, alert triage pipelines, and identity/access anomaly detection * Build internal tools that give engineering fast, self-service ways to check their own security posture, Leads product marketing strategy for CrowdStrike's cloud risk and developer security portfolio. Owns positioning, launches, messaging, analyst engagement, field readiness, technical content, competitive strategy, thought leadership, and adoption. Partners with Product and CTO leaders to shape roadmap and market direction, creates technical proof for cloud and application security audiences, and uses customer, pipeline, usage, and competitive insights to improve business outcomes. Top Skills: Ai TechnologiesAspmAWSCi/CdCiemCloud Vulnerability ManagementCnappContainer SecurityCspmExposure ManagementGCPImage SecurityInfrastructure As CodeKspmKubernetesAzureSoftware Composition Analysis, CrowdStrike