1 day ago
Base Salary
$125k - $205k/yr
Responsibilities
- Assess and improve Later’s security posture across applications, infrastructure, cloud environments, corporate systems, vendor tooling, and business workflows.
- Build and maintain internal security tools, automation, and services for secure development, compliance, vulnerability management, corporate security operations, and visibility.
- Implement security controls in CI/CD pipelines, including security scanning, dependency management, container scanning, and secret management.
- Support application security through secure design reviews, threat modeling, code review guidance, API security, microservices security patterns, and remediation planning.
- Improve cloud and corporate systems security through hardening, monitoring, configuration reviews, access reviews, Infrastructure-as-Code security scanning, and secure operational patterns.
- Strengthen logging, alerting, detection engineering, incident response, and security process maturity.
- Partner with technical and business teams to communicate risks, prioritize remediation, and embed practical security guidance.
- Support SOC 2 and related compliance efforts through automated controls, evidence collection, and cross-functional coordination.
Requirements
- 5–7+ years of experience as a Security Engineer or Software Engineer with a strong security focus.
- Proven ability to build and operate production-quality software, automation, and internal tooling.
- Strong understanding of application security, infrastructure security, cloud security, secure CI/CD practices, and corporate security controls.
- Hands-on experience with vulnerability management, secure software development, threat modeling, remediation workflows, and operational security improvements.
- Experience with OWASP, NIST, CIS Controls, SOC 2, and ISO 27001, including practical SOC 2 compliance support.
- Familiarity with AWS Security Hub, Azure Security Center, or GCP Security Command Center.
- Experience with SIEM/SOAR tools, logging and monitoring platforms, detection workflows, and incident response processes.
- Experience with Infrastructure-as-Code security scanning for Terraform or CloudFormation.
- Ability to explain complex security concepts clearly to technical and non-technical audiences and collaborate with engineering, IT, compliance, and business teams.
- Familiarity with C#, modern backend systems, cloud-native architecture, and SaaS business tooling.
Benefits
- Permanent team members are eligible for various benefits plans.
- The role may be based in Boston, MA; Vancouver, BC; or Vancouver, WA, and select positions may be fully remote.
- The company provides an inclusion-first workplace and is an equal opportunity employer with accessibility support available during recruitment.
About Later
Later builds an influencer marketing and social media platform for brands to discover creators, run campaigns, analyze performance, and manage creator payments, with optional managed services. The company also offers a link-in-bio tool used by marketers and creators. Founded in 2014 and headquartered in Boston, it is privately held and used by enterprise customers such as Nike, Wayfair, Unilever, and Southwest Airlines.