9 hours ago
Remote, United States +3 moreSenior
Base Salary
$100k - $200k/yr
Responsibilities
- Define security standards and secure-by-default solutions for application and cloud security.
- Build agents, skills, security tooling, and automation for triage, enrichment, review, detection, and development-lifecycle security.
- Embed risk-based security reviews into design specifications and architecture decisions.
- Lead threat modeling and risk assessments for high-risk features and platform changes.
- Assess and mitigate risks from agentic development and AI-powered production features.
- Conduct security code reviews, help define API security standards, and partner with engineering teams on threat remediation.
- Lead systemic, multi-team security remediation efforts and contribute to security observability and detection.
- Explore and adopt open-source security assessment and testing tools.
- Partner across security, compliance, and engineering and contribute to SOC 2 and ISO 27001/42001 initiatives.
- Support teammate growth and raise security standards across the engineering organization.
Requirements
- Proven experience securing enterprise SaaS applications, including authentication, authorization, and API input validation.
- Experience securing software and infrastructure deployment and change-management mechanisms.
- Background in software, platform, systems, network, cloud security, or application security engineering.
- Hands-on code review experience, ideally with Go, Python, or Rust.
- Experience with AWS or another major cloud provider and cloud infrastructure.
- Current knowledge of modern security practices, tooling, emerging threats, and AI-related security risks.
- Hands-on experience building agents or automation for security work, with examples or a project walkthrough available.
- Ability to work independently and collaboratively in a fast-paced, high-growth environment.
Benefits
- Competitive salary, meaningful equity, and comprehensive health benefits are offered; compensation is commensurate with experience.
- Quarterly in-person participation is required at one of the primary offices in San Francisco or Portland, Oregon.
- The role provides broad ownership and the opportunity to specialize within a small, early-stage security team.
About C1
C1 builds and delivers IT consulting and managed services spanning cloud, unified communications/contact center, infrastructure, and cybersecurity for enterprises and public-sector organizations. It integrates partner technologies with advisory, professional, and managed services to modernize and secure customer environments across industries such as healthcare, education, government, and financial services. Founded in 1993 and headquartered in Bloomington, Minnesota, C1 is privately held.