> Markdown version of [/jobs/ext/486357-senior-security-engineer](https://www.wearedevelopers.com/jobs/ext/486357-senior-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Security Engineer

- **Company:** SonarSource US, Inc.
- **Location:** Austin, TX, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Amazon Web Services, Bash Shell, Software as a Service, Cloud Computing Security, Encodings, Information Leak Prevention, Python (Programming Language), Software Engineering, SONAR (Symantec), Software Vulnerability Management, Cloud Platform System, Software Security, Gsuite
- **Published:** June 5, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=5246ff97b49c0382

## About the Role

Do you have experience in Vulnerability management?, * You can demonstrate strong hands-on experience in security engineering, cloud security, application security, or a closely related discipline.

 * You can demonstrate in-depth experience with cloud architectures, primarily AWS.
 * You can demonstrate experience reviewing architectures and embedding security requirements into engineering and operational workflows.
 * You can demonstrate experience assessing and securing modern application environments, including AI and agentic AI features.
 * You can demonstrate experience with vulnerability investigation, prioritization, and remediation management.
 * You can demonstrate practical scripting and automation experience using tools such as Python or Bash.
 * You are comfortable working across technical and non-technical stakeholders and can communicate risk and recommendations clearly.
 * Experience with SaaS environments. Wiz, CrowdStrike, and Google Workspace are a plus.

## Description

As a Senior Security Engineer in Austin, you will provide senior-level expertise to leadership, engineering, and Go-To-Market teams while assisting with incident response when necessary. Your primary focus will be partnering with infrastructure and product teams to implement secure-by-design architecture, practical security automation, and advanced vulnerability management., * Secure by design: Partner with product, platform, and infrastructure engineering teams to design and implement secure solutions.

 * Security review: Review cloud,network and endpoint architectures to ensure security requirements are identified early and integrated effectively.
 * Cloud security: Help engineering teams improve security across the software development lifecycle, cloud environments, and supporting services.
 * Vulnerability management: Investigate security findings, validate risk, partner with owners on remediation plans, and help drive issues to closure.
 * Security engineering projects: Develop and implement security specific solutions that support Sonar's strategic security plan, including evaluating and introducing new tools and capabilities.
 * Data Leakage: Drive DLP efforts across the company.
 * Customer trust support: Investigate and help address customer security concerns related to Sonar products, cloud platforms, and security controls.
 * Security incidents: As needed, act as a security subject matter expert during investigations, containment, remediation, and post-incident follow-up.
 * Threat management: Review relevant threat intelligence, assess how it applies to Sonar, and recommend practical mitigations.
 * Standards and guidance: Contribute to security patterns, engineering guidance, and repeatable practices that make the secure path the easiest path for teams.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Old tools, new tricks](https://www.wearedevelopers.com/videos/1916-old-tools-new-tricks)
- [A Brief History of Data Storage](https://www.wearedevelopers.com/videos/974-a-brief-history-of-data-storage)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [MCP doesn’t suck — your agent does](https://www.wearedevelopers.com/videos/100202-mcp-doesn-t-suck-your-agent-does)
- [JSON and Beyond](https://www.wearedevelopers.com/videos/968-json-and-beyond)

## Related Articles

- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)