2 months ago
Remote, United States +3 moreSenior
Base Salary
$100k - $200k/yr
Responsibilities
- Define and drive secure-by-default application and cloud security standards.
- Build agents, skills, tooling, and automation that integrate risk-based security practices into the development lifecycle.
- Conduct threat modeling, risk assessments, security code reviews, and API security reviews.
- Build security observability and detection signals and help engineering teams remediate critical threats.
- Lead multi-team remediation efforts for systemic security risks.
- Assess risks from agentic development practices and AI-powered production features.
- Contribute to SOC 2 and ISO 27001/42001 compliance and trust initiatives.
- Support teammate growth and raise security standards across the engineering organization.
Requirements
- Proven experience securing enterprise SaaS applications, including authentication, authorization, and API input validation.
- Experience securing software and infrastructure deployment and change-management mechanisms.
- Background in software, platform, systems, network, cloud security, or application security engineering.
- Hands-on code review experience, ideally with Go, Python, or Rust.
- Experience with AWS or another major cloud provider and cloud infrastructure.
- Current knowledge of security practices, tooling, emerging threats, and AI-related security risks.
- Hands-on experience building security agents, automations, or workflows that replace manual security work.
- Ability to work independently and collaboratively in a fast-paced environment.
Benefits
- Competitive salary, meaningful equity, and comprehensive health benefits.
- Quarterly in-person participation at the San Francisco or Portland, Oregon office is required.
About C1
C1 builds and delivers IT consulting and managed services spanning cloud, unified communications/contact center, infrastructure, and cybersecurity for enterprises and public-sector organizations. It integrates partner technologies with advisory, professional, and managed services to modernize and secure customer environments across industries such as healthcare, education, government, and financial services. Founded in 1993 and headquartered in Bloomington, Minnesota, C1 is privately held.