2 days ago
Base Salary
$150k - $225k/yr
Responsibilities
- Own end-to-end security initiatives spanning application security, cloud infrastructure hardening, and enterprise security.
- Maintain technical compliance controls for frameworks such as PCI DSS, including ASV scanning, network security control reviews, and tamper-detection monitoring.
- Deploy and tune infrastructure protecting applications from exploitation, account takeover, and denial of service.
- Drive security architecture and threat modeling for AI agent products with voice, chat, calendar, and account access capabilities.
- Review RFCs, PRDs, and MRs from a security perspective and partner with product and engineering teams on AI-native features.
- Build security tooling and frameworks that provide paved roads for engineers.
- Mentor engineers, address recurring incident patterns and tooling gaps, and improve security processes.
- Participate in the full incident-response lifecycle and a 24/7 on-call rotation.
- Evaluate and integrate AI-driven tooling into InfoSec workflows and use AI-assisted coding and security tools daily.
Requirements
- 5+ years of security engineering experience spanning at least two of application security, cloud/infrastructure security, or enterprise security.
- Hands-on experience with AWS and infrastructure-as-code such as Terraform or CloudFormation.
- Ability to read and contribute to product service code; Kotlin, NextJS, Python, Ruby, Scala, or Swift are preferred.
- Fluency in the OWASP Top 10 and practical remediation approaches.
- Knowledge of OAuth, OIDC, and SAML authentication and authorization standards.
- Exposure to LLM and agentic-system security issues including prompt injection, agent identity, and AI-related data exfiltration.
- Daily practical experience with AI-assisted coding and security tools, including the ability to direct and verify AI output.
- Strong written communication for threat models, design feedback, and merge-request reviews.
- Experience with the technical side of PCI, SOX, or similar compliance frameworks, including vulnerability scanning, control reviews, and tamper detection.
- Experience with static-analysis tools such as Snyk, Veracode, or Fortify; infrastructure vulnerability scanners such as Qualys, Tenable, or Rapid7; and penetration-testing tools such as BurpSuite or OWASP ZAP is preferred.
- Container and Kubernetes experience is preferred.
Benefits
- Remote position for applicants located in Eastern or Central time zones.
- Base salary of $150,000-$225,000, commensurate with experience and performance.
- Eligible for a year-end performance bonus and equity package.
- Medical, dental, and vision coverage.
- Flexible vacation policy.
- Pet discount plans and a retirement plan with company match (401K).
About Angi
Angi operates a marketplace that connects homeowners with local home service professionals through its website and mobile apps. It generates revenue by selling leads and advertising/subscription packages to pros and by facilitating online booking. Founded in 1995 and headquartered in Denver, it is a public company on Nasdaq and spans the U.S., Canada, and Europe, with a network of over 200,000 service professionals.