Senior Security Engineer
Guidewire Software24 days ago
Base Salary
$133k - $199k/yr
Responsibilities
- Lead multi-team infrastructure security initiatives focused on AWS environments and CI/CD pipelines.
- Design, implement, and operate cloud security controls covering governance, access management, logging, monitoring, data protection, configuration management, networking, and account lifecycle management.
- Build secure-by-default infrastructure-as-code, policy-as-code, CI/CD, and automation solutions.
- Define and maintain security baselines for cloud accounts, operating systems, containers, AMIs, Kubernetes, networks, and supporting infrastructure.
- Manage cloud account onboarding and offboarding, inventories, configuration drift, exceptions, and control validation.
- Design cloud and infrastructure network security, including segmentation, DNS, firewalls, routing, private connectivity, and traffic monitoring.
- Secure CI/CD and software supply chains, including dependencies, artifacts, containers, registries, third-party actions, secrets, and runners.
- Support identity and asset governance for applications, infrastructure, containers, service accounts, workload identities, API keys, AI agents, and MCP tools.
- Contribute to AI security initiatives involving LLMs, agents, tool integrations, threat modeling, prompt-injection defenses, data-egress protection, guardrails, and monitoring.
- Validate scanning-tool and AI-generated findings and improve remediation ownership and feedback loops.
- Represent Security in architecture, change-management, design-review, and operational forums.
- Create standards, runbooks, architecture decision records, dashboards, documentation, and enablement materials.
- Mentor engineers and help partner teams adopt secure patterns without direct management responsibility.
- Participate in on-call rotations and incident response for cloud and infrastructure security incidents.
- Monitor emerging threats and translate relevant developments into improvements to security controls.
Requirements
- Typically 5+ years of experience in security engineering, cloud security, infrastructure security, DevSecOps, or equivalent practical experience.
- Hands-on experience designing and operating secure AWS environments is required; GCP experience is strongly preferred.
- Experience with cloud governance, access management, policy enforcement, logging and monitoring, data protection, network security, configuration management, and cloud account lifecycle controls.
- Hands-on experience authoring, reviewing, testing, and troubleshooting infrastructure-as-code using Terraform, CloudFormation, or comparable technologies.
- Experience building, securing, testing, and operating CI/CD pipelines, preferably with GitHub Actions, including automation, secrets management, artifact handling, and runner security.
- Hands-on scripting or programming experience with Python, Go, or another appropriate language.
- Practical knowledge of cloud and infrastructure networking, including segmentation, routing, DNS, firewalls, ingress and egress controls, private connectivity, and network telemetry.
- Experience securing containers and Kubernetes platforms, preferably EKS or an equivalent platform.
- Knowledge of threat modeling, secure design, vulnerability management, security testing, risk assessment, monitoring, and incident response.
- Experience evaluating security-control effectiveness and contributing to security measurement and analysis capabilities.
- Working knowledge of identity and access control, privileged access management, identity governance, zero-standing privilege, workload identities, non-human identities, and secrets management.
- Working knowledge of software supply-chain security, including SBOMs, artifact signing, provenance, dependency management, secure registries, and CI/CD runner hardening.
- Working knowledge of foundational AI security concepts and eagerness to apply AI capabilities to security automation.
- Ability to own complex work, manage ambiguity, make trade-offs, identify risks, and deliver outcomes across multiple teams.
- Strong written and verbal communication skills, including explaining complex security concepts in business terms.
- Preferred experience with AI-security risks and controls involving LLMs, AI agents, MCP, AI gateways, prompt-injection defense, sensitive-data leakage, and AI models or tools.
- Familiarity with NIST AI RMF, OWASP LLM Top 10, MITRE ATLAS, ISO/IEC 42001, or comparable frameworks.
- Relevant certifications such as AWS Security Specialty, CISSP, or GIAC are preferred.
Benefits
- Health, dental, and vision insurance.
- Paid time off.
- Company-sponsored retirement plan.
- Some roles may be eligible for annual bonuses, commissions, and/or long-term incentive awards.
- The position is a full-time role; no remote or office arrangement is specified.
Tech Stack
Categories
About Guidewire Software
Guidewire is the platform P&C insurers trust to engage, innovate, and grow efficiently. More than 570 insurers in 43 countries, from new ventures to the largest and most complex in the world, rely on Guidewire products. With core systems leveraging data and analytics, digital, and artificial intelligence, Guidewire defines cloud platform excellence for P&C insurers. We are proud of our unparalleled implementation record, with 1,700+ successful projects supported by the industry’s largest R&D team and SI partner ecosystem. Our marketplace represents the largest partner community in P&C, where customers can access hundreds of applications to accelerate integration, localization, and innovation. For more information, please visit https://www.guidewire.com/.