> Markdown version of [/jobs/ext/3956700-security-engineer](https://www.wearedevelopers.com/jobs/ext/3956700-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Engineer

- **Company:** Gamma
- **Location:** San Francisco, CA, United States (Remote available)
- **Experience:** Experienced
- **Salary:** $180,000.0 - $310,000.0
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Amazon Web Services, Application Layers, Software System Penetration Testing, Software as a Service, Code Review, Cyber Security, Identity and Access Management, Internet Security, Intrusion Detection and Prevention, Python (Programming Language), Log Analysis, Node.Js, Open Web Application Security, Zero Trust Network Access, Secure Coding, Web Application Security, Service Pack, Security Information and Event Management, Software Engineering, TypeScript, Software Vulnerability Management, Software Security, Amazon Virtual Private Cloud (VPC), Backend, Cloudformation, Terraform, Vulnerability Analysis
- **Published:** October 27, 2026
- **Apply:** https://www.careerbuilder.com/job-details/security-engineer-san-francisco-ca--7ffd1b41-c607-49cb-a99c-fde5c31f16b5

## About the Role

Internet Security, Computer Security, Incident Response, Artificial Intelligence (AI), Software Patches, Time Management, Automation, Machine Tool, Risk Management, Risk Analysis, * 5+ years of software engineering experience with at least 2-3 years focused on security engineering or application security

 * Strong hands-on experience securing AWS environments, including IAM, VPC, security groups, CloudTrail, and GuardDuty
 * Proficiency in at least one backend language (Python, TypeScript/Node.js, or Go preferred) with experience building security tools
 * Deep understanding of web application security including OWASP Top 10, common vulnerability classes, and authentication/authorization patterns, with experience implementing security controls in CI/CD pipelines and infrastructure-as-code (Terraform, CloudFormation)
 * Clear communicator who works well embedded with product engineering teams
 * Background in penetration testing, offensive security, and SIEM/log analysis

Nice to have

 * Experience at a high-growth SaaS startup navigating rapid scaling and compliance
 * Familiarity with AI/ML security tooling, including using frontier models for code scanning, automated pentesting, or threat detection
 * Experience building zero trust architecture or identity-aware access controls (FIDO2, short-lived tokens, hardware-bound credentials)
 * Knowledge of supply chain security frameworks like SLSA, OpenSSF Scorecard, or SBOM tooling

## Description

You'll protect Gamma's platform, infrastructure, and data as we scale to serve hundreds of millions of users. That means building security tooling and automation, partnering with engineering teams to embed security into everything we ship, and helping shape how the company thinks about security as a practice. You'll work across the organization to identify and mitigate risks without slowing down development velocity.

This role combines hands-on security engineering with strategic influence. You'll write code to solve security problems, conduct architecture reviews, lead vulnerability management, and drive initiatives for compliance frameworks like SOC 2 and ISO 27001. You'll work closely with engineering, product, and compliance to make security foundational rather than reactive.

Our team has a strong in-office culture and works in person 4-5 days per week in San Francisco. We love working together to stay creative and connected, with flexibility to work from home when focus matters most.

What you'll do

 * Design and implement security controls across Gamma's AWS infrastructure and application layer
 * Build security tooling and automation to detect, prevent, and respond to threats at scale
 * Conduct security reviews of architecture designs, code, and infrastructure changes
 * Lead vulnerability management, coordinate bug bounty responses, and drive remediation priorities
 * Develop and maintain security monitoring, alerting, and incident response capabilities
 * Partner with engineering teams on secure coding practices and threat modeling
 * Deploy AI-assisted vulnerability scanning across our codebase and infrastructure-scanning our own systems with frontier models before attackers do
 * Build automated triage workflows that use AI to deduplicate findings, estimate exposure, and draft remediation tickets
 * Drive adoption of memory-safe languages and secure-by-design practices for new code, informed by current CISA and NCSC guidance