Senior Security Engineer
Triple Whale7 hours ago
Responsibilities
- Design and implement workload identity, least-privilege IAM, secrets management, network isolation, and egress controls.
- Secure AI agents and code execution environments through sandboxing and clearly defined access boundaries.
- Conduct security reviews of services, systems, and architectures and help engineers implement fixes.
- Perform internal penetration tests and validate security controls.
- Build security monitoring, detection rules, and alerting across infrastructure and applications.
- Integrate security into development workflows, CI/CD, infrastructure as code, and software dependencies.
- Support incident investigations and address underlying security weaknesses.
Requirements
- Strong hands-on experience in cloud, infrastructure, or application security.
- Deep understanding of Kubernetes, IAM, networking, and cloud security; GCP experience is preferred.
- Strong TypeScript development skills and experience building security tooling and automation.
- Experience with security reviews, threat modeling, penetration testing, and vulnerability remediation.
- Ability to exercise practical judgment and work independently alongside engineering teams.
Benefits
- Remote role, as indicated by the #LI-Remote designation.
Tech Stack
Categories
About Triple Whale
Triple Whale builds an ecommerce intelligence platform that centralizes store, ads, and finance data into dashboards, attribution, and AI-powered automations for DTC brands. It sells subscription software used to measure performance, generate creative, and take actions across marketing channels via integrations with Shopify and major ad networks. Founded in 2021 and headquartered in Columbus, Ohio, the privately held company counts brands like Pressed Juicery, OUAI, and True Classic as customers.