21 hours ago
Salt Lake City, UT, USASenior
Responsibilities
- Conduct security architecture, design, and product reviews and recommend risk-based mitigations.
- Advise product, engineering, legal, and leadership stakeholders as an application security subject matter expert.
- Mature the SSDLC through secure coding standards, security requirements, developer education, and a security champions program.
- Develop scalable security tooling and automation for integrating security controls into CI/CD pipelines.
- Mentor engineers and build collaborative partnerships across product and engineering teams.
- Assess and help secure AI tools, agentic systems, MCP, and LLM-powered workflows.
Requirements
- 5+ combined years of experience in software engineering, application security, product security, or a closely related field within a SaaS environment.
- Experience securing web applications using modern frameworks and cloud-native architectures, particularly AWS.
- White-box penetration testing experience and knowledge of common application vulnerabilities, OWASP Top 10, API security, and authentication or authorization flaws.
- Experience implementing or maturing secure development programs and integrating security tooling into CI/CD pipelines.
- Ability to conduct security architecture and design reviews and communicate security risk in business terms.
- Familiarity with AI security risks, agentic systems, MCP, and LLM-powered workflows.
- Preferred qualifications include modern technology stack development experience, knowledge of OWASP ASVS, NIST 800-53, SOC 2, or GDPR, relevant security certifications, and bug bounty program management experience.
- A bachelor's degree in Computer Science, Information Security, or a related field is preferred.
Benefits
- Lucid offers a hybrid workplace with remote work, office work, or a combination depending on the role and team.
About Lucid
Lucid builds a visual collaboration suite—Lucidchart for diagramming, Lucidspark for virtual whiteboarding, and Lucidscale for cloud architecture visualization—sold as SaaS to individuals and enterprises. Founded in 2010 and headquartered in South Jordan, Utah, the privately held company integrates with Google Workspace, Microsoft 365, Atlassian, and Slack to support team planning and documentation across engineering, product, and operations.