Staff Security Engineer

The role

You will scale and mature security across platform, infrastructure, and development workflows. You will partner with engineering, infrastructure, and product teams to embed security into software building and operations.

What you will do

• Lead security architecture and design reviews across applications, infrastructure, and integrations.
• Conduct and coordinate penetration testing, threat modeling, and security reviews.
• Design and implement security automation within CI/CD pipelines.
• Partner with infrastructure and DevOps teams to secure cloud platforms (AWS).
• Build security observability and detection capabilities.
• Identify systemic weaknesses and design controls.
• Work with developers to improve security practices through guidance and code review support.
• Lead incident response investigations and build mitigation processes.
• Own and evolve the bug bounty program.
• Develop security standards, playbooks, and training programs.

Required qualifications

• Deep understanding of application security, cloud security, and modern threat landscapes.
• Strong software engineering background with experience writing production-grade code or automation (Python, Typescript, or similar).
• Hands-on experience securing cloud-native infrastructure, especially AWS, including IAM, networking, and containerized workloads.
• Experience building or integrating DevSecOps pipelines, including SAST, DAST, IaC scanning, and container security tooling.
• Experience designing security telemetry pipelines using tools such as SIEM platforms, observability systems, or data lakes.
• Experience running or participating in penetration testing, threat modeling, or architectural security reviews.
• Proven ability to collaborate effectively with engineering, DevOps, and product teams.
• Excellent communication skills.
• Strong understanding of SaaS architectures, distributed systems, and internet-facing platforms.
• Experience developing security frameworks aligned with CIS benchmarks, NIST, or SOC2 / PCI / HIPAA compliance requirements.
• Experience building security detections, threat intelligence pipelines, or runtime protection mechanisms.
• Hands-on experience with Kubernetes, container security, and infrastructure-as-code (Terraform, Ansible).

Benefits

• Competitive salary and equity packages
• Platinum medical, dental, and vision
• Free life insurance including long-term disability and short-term disability
• Unlimited PTO including uncapped vacation days and paid holidays
• Maternity and paternity leave
• 401(k) contribution of 3% of income
• Lunch 2x/week
• Monthly phone stipend and other home office perks
• Health FSAs and HSAs
• Team events and Offsites

About the company

Assured provides large insurers with software solutions to modernize claims processing. They provide tools ranging from self-service claim-filing software to backend fraud detection.