Staff Security Engineer

The role

You will be a hands-on technical leader strengthening security across application, cloud infrastructure, development lifecycle, internal systems, and incident-response practices. You will work with Engineering, DevOps, IT, Product, Legal, and Privacy to design controls and automate security processes.

What you will do

• Design and implement security controls across AWS environments
• Embed security requirements into Terraform and other Infrastructure as Code
• Build automated checks for insecure configurations across Kubernetes, containers, and serverless workloads
• Run threat modelling and security architecture reviews
• Strengthen tenant isolation and fine-grained data access controls
• Protect sensitive compensation, financial, customer, and employee data
• Review AI and agentic workflows for data leakage and prompt injection
• Identify and help remediate application vulnerabilities
• Embed security testing into CI/CD
• Improve security visibility and build detection logic

Required qualifications

• Eight or more years of experience in security engineering, cloud security, application security, DevSecOps, or infrastructure engineering
• Strong hands-on experience securing AWS environments, including IAM, networking, encryption, logging, and secrets management
• Experience with Terraform, Kubernetes, containers, and security controls in CI/CD pipelines
• Strong understanding of application and API security, authentication, authorization, and multi-tenant SaaS risks
• Experience with vulnerability management, threat modelling, incident response, and security automation
• Ability to write scripts using Python, Bash, PowerShell, or a similar language
• Strong communication, troubleshooting, and cross-functional collaboration skills

Nice to have

• Experience supporting SOC 2, ISO 27001, privacy programs, or enterprise customer security reviews
• Experience securing analytics platforms, data pipelines, or systems handling sensitive customer data
• Experience with AWS security services, EKS, Datadog, Wiz, Snyk, CrowdStrike, or similar tools
• Experience securing AI applications, large language models, agents, or Amazon Bedrock workloads
• Experience in a B2B SaaS or high-growth technology company
• Relevant security or cloud certifications

Benefits

• Employee stock ownership plan
• Medical insurance
• Dental insurance
• Vision insurance
• Disability insurance
• Life insurance
• Paid parental leave program
• $750 yearly training stipend

About the company

Forma.ai is a Series B startup that's revolutionizing how sales compensation is designed, managed and optimized. They handle billions in annual managed commissions for market leaders.