Staff Security Engineer- Security and Compliance

The role

You will provide hands-on technical leadership across product and application security. You will shape secure architecture, strengthen the SDLC, and lead vulnerability response for cloud and AI capabilities.

What you will do

• Own and evolve the secure SDLC across the Securiti portfolio
• Provide security leadership for AI capabilities
• Tune and improve SAST, dependency, secrets, container, infrastructure, and SBOM controls
• Lead product vulnerability response from reproduction to remediation
• Perform targeted penetration testing and security research
• Strengthen software supply chain security
• Build reusable security libraries and developer enablement
• Track and communicate security metrics
• Partner with engineering on technical controls for compliance frameworks
• Serve as a technical security partner for customer due diligence and audits

Required qualifications

• 8+ years in security, with substantial experience in application or product security for SaaS or cloud-native platforms
• Strong coding and code-review skills in one or more languages such as Go, Python, Java, or TypeScript
• Deep knowledge of multi-tenant cloud security across AWS, Azure, or GCP, including IAM, Kubernetes, secrets, tenant isolation, and protection of sensitive customer data
• Hands-on experience securing LLM-powered applications
• Demonstrated experience building or materially improving a secure SDLC across multiple engineering teams
• Experience leading vulnerability response or coordinated disclosure
• Practical knowledge of software supply chain security, including SBOM, signing, SLSA, and SSDF concepts
• Working experience with security assurance frameworks such as SOC 2, ISO 27001, or FedRAMP
• Strong communication skills
• A computer science or engineering degree, or equivalent practical experience

Nice to have

• Experience with DSPM, privacy engineering, data governance, CASB, DLP, or other platforms handling highly sensitive customer data
• Experience supporting FedRAMP Moderate or ISO/IEC 42001 for a SaaS platform
• Familiarity with OWASP guidance for LLM applications, NIST AI RMF, and privacy-by-design principles
• Relevant certifications such as CISSP, CSSLP, OSCP/OSWE, CCSP, or GIAC
• Published security research, CVE credits, conference presentations, or open-source security tooling
• Experience collaborating across US and Asian time zones

Benefits

• Unlimited paid time off
• 12 paid holidays including 4 global VeeaMe Days
• 24 paid volunteer hours annually through Veeam Cares
• 8 weeks paid parental leave for all parents
• 16 weeks paid parental leave for birthing parents
• Medical, dental, and vision coverage starting on your first day
• Mental health support, therapy sessions, and digital wellness tools via Employee Assistance Program
• 401(k) retirement plan with company matching contributions
• Fertility, adoption, and surrogacy support through Maven
• AirVet: 24/7 virtual veterinary care at no cost
• Legal services, identity protection, and supplemental health insurance options
• Tax-advantaged spending accounts for healthcare, dependent care, and commuting

About the company

Veeam is the Data and AI Trust Company, specializing in helping organizations ensure their data and AI are fully understood, secured, and resilient. The company protects over 550,000 customers worldwide.