> Markdown version of [/jobs/ext/3961093-security-engineer](https://www.wearedevelopers.com/jobs/ext/3961093-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Engineer

- **Company:** Axios
- **Location:** United States (Remote available)
- **Experience:** Expert
- **Salary:** $150,000.0 - $180,000.0
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Amazon Web Services, Amazon S3, Software System Penetration Testing, Bash Shell, Cloud Computing, Cloud Computing Security, Computer Programming, Computer Networks, Cryptographic Protocols, Github, Identity and Access Management, Intrusion Detection and Prevention, Python (Programming Language), Key Management, Prometheus, Zero Trust Network Access, Secure Coding, Security Information and Event Management, Systems Integration, Software Vulnerability Management, Data Logging, Grafana, Software Security, Cyber Threat Analysis, Kubernetes, Devsecops, Security Orchestration, Automation & Response, Static Application Security Testing, Vulnerability Analysis, Dynamic Application Security Testing
- **Published:** October 27, 2026
- **Apply:** https://job-boards.greenhouse.io/axios/jobs/8325767

## About the Role

* Deep expertise in cloud and application security, including threat modeling, vulnerability scanning, penetration testing, IAM, secrets management, AI security, and compliance frameworks.
 * Strong working knowledge of AWS infrastructure and security controls (IAM, KMS, EKS, RDS, S3).
 * Experience hardening Kubernetes clusters, runtime security, container scanning, and network policy enforcement.
 * Proficiency in integrating SAST/DAST and security automation into CI/CD pipelines (GitHub Actions).
 * Solid scripting or programming skills in Python, Go, or Bash for security tooling and automated remediation.
 * Hands-on experience with SIEM, security logging, automated threat intelligence, and AI-powered monitoring frameworks (Prometheus, Grafana, Loki, or modern SOC tooling).
 * Demonstrated leadership in driving security initiatives, defining policy, and guiding engineering teams on security risk.
 * Exceptional communication and stakeholder management skills, with the ability to effectively balance security requirements and business agility.

## Description

* Lead the architectural design and implementation of security controls across cloud infrastructure, platform services, and AI integrations.
 * Drive vulnerability management, threat modeling, incident response, and proactive security assessments across AWS, Kubernetes, and AI application environments.
 * Shape, maintain, and execute the company's long-term security roadmap in close alignment with engineering and executive leadership.
 * Embed automated security testing, SAST/DAST, and AI-driven compliance checks directly into CI/CD pipelines and infrastructure-as-code workflows.
 * Oversee identity and access management (IAM), secrets management, encryption protocols, and zero-trust architecture standards.
 * Evaluate, deploy, and maintain internal AI security tools and modern third-party defensive solutions to detect, mitigate, and respond to AI-driven threats and sophisticated attack vectors in real time.
 * Promote a strong security culture across engineering by conducting threat modeling workshops and coaching teams on secure coding and infrastructure practices.
 * Partner with product, infrastructure, data, and QE teams to ensure security is integrated seamlessly into every stage of the development lifecycle., * Security & Compliance: Focused on proactive security initiatives, including automated vulnerability scans, implementation of controls, remediation, and contributions to the long-term security roadmap.
 * Cloud Security Architecture: Hardened, reviewed, and optimized AWS and Kubernetes infrastructure security to meet strict compliance, resilience, and least-privilege access standards.
 * DevSecOps & Automation: Integrated automated security scans, secret detection, and vulnerability gates seamlessly into CI/CD pipelines without disrupting developer velocity.
 * Security Tooling Adoption: Evaluated, piloted, and deployed advanced security and defensive AI tools that measurably enhanced threat detection speed and reduced exposure risk.
 * Threat Detection & Response: Established robust security monitoring, SIEM alerting, and incident response playbooks to maintain real-time visibility and rapid response capabilities across all production platforms.
 * Cross-Functional Security Leadership: Partnered with engineering, product, and QE teams to instill a security-first culture, conduct threat modeling workshops, and guide technical teams on risk mitigation.
 * AI Defense & Security: Evaluated and deployed internal AI security tools and 3rd-party defensive solutions to proactively safeguard infrastructure, applications, and corporate assets against AI-driven threats and emerging attack vectors.