Senior Security Engineer (Security Assurance & Scaling)

Quick Facts

• Role: Senior Security Engineer (Security Assurance & Scaling)
• Focus: Security reviews, threat modeling, scalable security standards, and automated enforcement for internet-facing services and backend infrastructure

Description

Partner with infrastructure and application teams to identify where security standards and controls should be applied across ASE services. Lead security reviews and threat modeling across the development lifecycle, then translate findings into standard methodologies and platform-wide security improvements. Serve as a technical security lead for decisions impacting millions of users and help automate enforcement at scale.

Responsibilities

• Conduct security reviews and security risk assessments across ASE engineering teams
• Build and advocate for security standards, methodologies, and threat models
• Prioritize security capabilities and controls that must be enforced platform-wide
• Drive security improvements by partnering with security engineering, privacy, and offensive security teams
• Identify opportunities for automation and implement enforcement with security and platform engineering
• Use data to improve review efficiency and target high-value engagements

Requirements

• 8+ years conducting security reviews, threat modeling, tracking findings, and communicating risk to engineering and leadership
• Hands-on cloud security engineering experience securing at least one major cloud platform (AWS, GCP, or AliCloud) in production
• Experience securing cloud-native applications and workloads, including Kubernetes (EKS/GKE), serverless (Lambda/Cloud Functions), and modern CI/CD pipelines
• Experience building/evaluating/directing AI/ML-based security tooling to scale secure design review capacity
• Proficiency in at least one programming language: Python, Java, Go, or Swift

Benefits

• Raise the security bar across engineering teams by turning security expertise into scalable controls and standards
• Influence security decisions for services used by millions of users
• Work closely with engineering and security teams to improve automation and enforcement across the platform