16 days ago
Base Salary
$130k - $160k/yr
Responsibilities
- Design, maintain, and evolve security architectures, reference architectures, secure design patterns, and technical security standards.
- Perform security architecture reviews and threat modeling for enterprise applications, cloud platforms, infrastructure services, and technology integrations.
- Define and implement GCP cloud security guardrails, network segmentation, logging standards, workload protection, and access control models.
- Integrate security controls into CI/CD pipelines, including secure builds, container security, IaC security, secrets management, and software supply chain protection.
- Assess emerging AI, generative AI, and AI-assisted development technologies and define secure usage patterns.
- Develop security guidance for API security, authentication, encryption, identity and access management, and secure SDLC practices.
- Research emerging attack methods and vulnerabilities, improve security analysis and threat detection through automation, and evaluate enterprise security tooling.
- Participate in the security on-call rotation, respond to incidents, provide technical customer guidance, and mentor colleagues on secure design.
Requirements
- 8+ years of experience in information security, security architecture, cloud security engineering, or a related technical discipline.
- Deep expertise in Google Cloud Platform security, cloud architecture patterns, native security capabilities, and workload protection.
- Hands-on experience securing CI/CD pipelines, containers, infrastructure-as-code, secrets management, and DevSecOps practices.
- Experience with threat modeling and security architecture or design reviews for complex, distributed, cloud-native systems.
- Proficiency in at least one scripting language, such as Python, Java, or Bash/shell.
- Knowledge of network security, Zero Trust, firewalls, segmentation, identity and access management, SSO, MFA, federation, and least-privilege access.
- Strong understanding of application security, OWASP, API security, secure SDLC practices, SAML, and OAuth2.
- Working knowledge of protecting and administering macOS, Linux, and Windows systems.
- Ability to translate security requirements into practical, scalable technical solutions and explain complex security topics to technical and non-technical audiences.
- Experience experimenting with AI tools.
- Preferred qualifications include security certifications such as CISSP, CCSP, Google Cloud Professional Security Engineer, OSCP, or GIAC certifications; experience with Splunk, CrowdStrike, Rapid7, Vanta, Okta, DLP, Kubernetes security, CSPM, CWPP, data security, AI security, and third-party technology assessments.
Benefits
- Fully remote work with up to 10% travel based on business needs.
- Starting base pay of $130,000-$160,000 USD per year plus stock options.
- Medical, dental, and vision insurance for employees and dependents.
- Flexible time off, company-paid holidays, paid parental leave, and paid volunteer time off.
- Mental health and wellness resources, employer-subsidized life insurance, and short- and long-term disability coverage.
- Monthly remote-work stipend, mentorship, and professional development opportunities.
Tech Stack
Categories
About Airship
Airship builds a mobile-first customer engagement platform for product and marketing teams to orchestrate cross-channel messaging and customer journeys across apps, web, email, SMS, and mobile wallets. It sells SaaS tools for push notifications, in-app messaging, personalization, and testing used by brands such as Alaska Airlines, BBC, and The Home Depot. Founded in 2009 and headquartered in San Francisco, it is a privately held company.