23 days ago
Remote, United States +8 moreSenior
Base Salary
$145k - $175k/yr
Responsibilities
- Assess and continuously improve security posture across applications, infrastructure, cloud environments, corporate systems, vendor tooling, and business workflows.
- Define and implement scalable security standards, guardrails, and automated controls supporting SOC 2 readiness.
- Build and maintain internal security tools, automation, and services for secure development, compliance, vulnerability management, corporate security operations, and visibility.
- Integrate secure build and deployment patterns, security scanning, dependency management, container scanning, and secret management into CI/CD pipelines.
- Perform secure design reviews, threat modeling, code review guidance, API security work, microservices security work, and remediation planning.
- Improve cloud and corporate systems security through hardening, monitoring, configuration reviews, access reviews, and Infrastructure-as-Code security scanning.
- Strengthen logging, alerting, detection engineering, incident response, and security observability.
- Provide clear, pragmatic security guidance and coordinate remediation with technical and non-technical teams.
Requirements
- 5-7+ years of experience as a Security Engineer or Software Engineer with a strong security focus.
- Proven ability to build and operate production-quality software, automation, and internal tooling.
- Strong understanding of application, infrastructure, cloud, CI/CD, and corporate security controls.
- Hands-on experience with vulnerability management, secure software development, threat modeling, remediation workflows, and operational security improvements.
- Experience applying OWASP, NIST, CIS Controls, SOC 2, and ISO 27001 in production and business environments.
- Experience supporting SOC 2 compliance through practical, automated, and auditable controls.
- Familiarity with AWS Security Hub, Azure Security Center, or GCP Security Command Center.
- Experience with SIEM/SOAR tools, logging and monitoring platforms, detection workflows, and incident response processes.
- Experience with Infrastructure-as-Code security scanning for Terraform or CloudFormation.
- Ability to communicate complex security concepts clearly to technical and non-technical audiences and collaborate with engineering, IT, compliance, and business teams.
- Familiarity with C#, modern backend systems, cloud-native architecture, and SaaS business tooling.
Benefits
- Fully remote position available within the United States.
- Permanent team members are eligible to participate in various benefits plans.
- Compensation is reviewed bi-annually using market and performance-related factors.
About Later
Later is the leading influencer marketing and social partner built on insight, not guesswork. We help brands choose the right creators and launch campaigns with confidence, backed by intelligence you can trust and experts who know how to make it work. Learn more at https://linkin.bio/latermedia/