> Markdown version of [/jobs/ext/4609109-security-engineer](https://www.wearedevelopers.com/jobs/ext/4609109-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Engineer

- **Company:** ROKT LLC
- **Location:** New York, NY, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Amazon Web Services, Cloud Computing, Computer Programming, Customer Data Management, Python (Programming Language), Open Source Technology, Commercial Software, Secure Coding, Software Vulnerability Management, Forensic Toolkit, Data Logging, Large Language Models, Software Security, Agentic-AI, Containerization, Data Lakes, Kubernetes, Api Design, Programming Languages
- **Published:** November 6, 2026
- **Apply:** https://www.juju.com/job/28_25303_6f472f456d579019127edc4b0fc78029

## About the Role

* Threat Expertise - Strong understanding of application security threats, particularly in modern API-based architectures, Kubernetes-based operating environments, CI/CD pipelines and newer threats related to LLMs and Agentic AI. Familiar with threat modeling and use of threat catalogues to capture threat actors, tactics, techniques, and procedures.
 * Detection Expertise - Technical ability to establish user and entity behavioural analysis (UEBA) and rule-based detections to provide security events in a large scale, high log volume environment. Experience with automated event correlation to improve our signal-to-noise ratio and minimise alert fatigue.
 * Response & Forensics - Experience providing hands-on incident response and forensics to contain and eradicate.
 * Programming Skills - Desired proficiency in at least one modern programming language such as Go or Python.
 * Cloud Platforms - Experience with cloud platforms, notably AWS or GCP, and containerized environments.
 * Security Tools - Familiarity with relevant open-source and commercial software, notably security data lake technologies and network, host and Cloud-based detection and forensic tools.

## Description

We are looking for a Security Engineer with a strong foundation in threat intelligence, detection, response, and forensics. In this role, you will be at the forefront of protecting the platform and customer data that are fundamental to maintaining trust and delivering a smarter, faster, and better e-commerce experience. You have a product builder's mindset and will help improve our capabilities to meet the threat of AI-based threats., * Develop AI-Driven Security Solutions - Design and implement log management capabilities, detection rules and behaviour baselines, security event triage, incident response and forensic workflows, and associated reporting. Utilize AI workflow tools to provide 365/7 response with consistency.

 * Automate Threat Assessments - Leverage AI to automate threat intelligence gathering, maintain catalogues of threat actors, tactics, techniques, and procedures as they apply to our business processes and technologies, identify possible mitigations, and ensure we are prepared and ready to respond to incidents.
 * Subject Matter Expertise - Provide deep expertise in application security threats, particularly in modern API-based architectures and Kubernetes-based operating environments. Address security challenges associated with detecting and responding to actors empowered with Large Language Models (LLMs) and Agentic AI.
 * Collaborate Across Teams - Work closely with system and product owners, Legal and Public Relations teams, and Senior Leadership to ensure incident readiness. Translate complex detection and response requirements into practical and scalable solutions.
 * Stay Informed on Security Trends - Keep abreast of the latest security trends, threat actors, vulnerabilities, and technologies. Apply this knowledge to improve existing security measures and develop new strategies to protect against emerging threats.
 * Mentor and Educate - Provide guidance and mentorship to the business on the threat landscape and how that translates to security requirements, including logging guidelines, secure coding and architectural practices, vulnerability remediation, or compliance adherence. Conduct security training and outreach for business teams.
 * Drive Continuous Improvement - Continuously seek opportunities to improve security processes and tools. Advocate for new technologies and methodologies to enhance the organization's ability to detect, prevent, and respond to security threats effectively.
 * Be a Force for Good - Uphold our commitment to being a "Force for good" by considering the ethical implications of AI in security and ensuring our protective measures are aligned with our company values and respect for user privacy.