4 months ago
Chicago, IL, USA +6 moreSenior
Base Salary
$131k - $169k/yr
Responsibilities
- Embed security into feature design and development through design reviews and threat modeling.
- Balance security risks with delivery needs and communicate security issues to nontechnical stakeholders.
- Assess risks from AI tooling, integrations, and AI-generated code.
- Apply AI-assisted tooling to triage, threat detection, code review, and documentation.
- Work across corporate IT security, cloud-hosted systems, detection rules, and other security domains.
- Support teams with security guidance while building relationships across the organization.
- Contribute to security metrics and use them to inform the security roadmap.
- Own security work from design through post-release support and help protect customer data.
Requirements
- At least four years of experience in a security or development role across most of the listed security activities.
- Experience reviewing software designs and implementations, triaging and remediating security issues, and testing fixes.
- Experience with penetration testing providers, web application and API risk assessments, third-party integrations, and vulnerability assessments.
- Experience configuring SAST, SCA, and DAST tooling and incorporating security tools into build and deployment pipelines.
- Experience with security alerting, detections, automations, security training, EDR alerts, MDM, and security roadmaps.
- Strong spoken and written communication skills.
- Experience with some of Microsoft .NET/C#, JavaScript, React, EmberJS, and Python.
- Working knowledge of at least one of Azure, AWS, or GCP, with Azure used predominantly.
- Working knowledge of PowerShell or Bash and Python.
- Working knowledge of at least one AI development tool, such as Claude Code or GitHub Copilot.
- Experience with PortSwigger Burp or a similar tool.
- Security certifications such as OffSec OSCP, AWAE, GIAC, Burp Practitioner, PJPT, or Microsoft/AWS development and cloud certifications are preferred.
- Experience securing AI applications, systems, or AI tooling is highly regarded.
Benefits
- Flexible time off, with four weeks encouraged annually
- Company-paid medical coverage for employees and eligible dependents
- Paid dental and vision coverage for employees and eligible dependents
- 401(k) with company matching
- Flexible Spending Account
- Up to eight weeks of paid parental leave
- Work-from-home stipend
- Globally distributed work environment across the US, Australia, New Zealand, Canada, the UK, and the Philippines
Tech Stack
Categories
About Karbon
Karbon is the collaborative practice management platform for accounting firms. It brings your team, clients, systems, and data together in one place, significantly improving visibility, efficiency, and connectivity no matter where your people are located.