Lead Cloud Security/AppSec Engineer
Flagship Pioneering, Inc.4 months ago
Base Salary
$148k - $204k/yr
Responsibilities
- Own remediation execution for Wiz findings across AWS environments in partnership with Infrastructure & Operations.
- Design and implement SAST, secrets scanning, infrastructure-as-code security, and container-scanning guardrails in engineering pipelines.
- Build AI-powered pipeline security automation, including LLM-assisted code review and automated SAST remediation suggestions.
- Build and operate cloud- and application-layer data loss prevention controls.
- Own technical execution for Entra ID or Azure AD conditional access, BYOD policy enforcement, and cloud identity governance.
- Write and tune cloud-side detection rules and improve alert fidelity with the SOC.
- Contribute to security architecture reviews and guardrail design for AI-powered platforms, including Bedrock- and EKS-based platforms.
- Serve as an embedded security engineering partner to portfolio company engineering teams throughout the development process.
- Design and maintain LLM-, agentic-tooling-, and automation-based workflows for security triage, remediation drafting, and other owned functions.
- Define and build Flagship’s cloud security and AppSec engineering practice in collaboration with the CISO and Director of Security Engineering.
Requirements
- At least 5 years of experience in cloud security, application security, or a closely related security engineering discipline.
- Deep hands-on experience with AWS Security Hub, GuardDuty, IAM, SCPs, CloudTrail, and cloud posture tooling; Wiz experience is strongly preferred.
- Practical experience integrating SAST, DAST, and SCA tooling into CI/CD pipelines and working directly with developers to resolve findings.
- Experience designing and enforcing conditional access policies with Entra ID or Azure AD.
- Ability to write infrastructure-as-code and scripting using Python, Terraform, or equivalent.
- Experience with LLM APIs, prompt engineering, agentic orchestration frameworks, and AI-augmented security workflows at scale.
- Experience securing ML or AI platforms such as Bedrock or SageMaker is preferred.
- AWS Security Specialty, GWEB, OSCP, or equivalent certification is preferred.
- Experience with portfolio-company or multi-entity security models is preferred.
- Familiarity with HIPAA technical safeguards and PHI data flows in cloud environments is preferred.
- Container and Kubernetes security experience, including EKS, image scanning, and network policy, is preferred.
- Strong communication, collaboration, relationship-building, and self-directed execution skills are required.
Benefits
- Healthcare coverage, annual incentive program, retirement benefits, and other benefits are offered.
- The role is a net-new capability position with direct collaboration with the CISO and Director of Security Engineering.
- The role offers substantial autonomy to build the cloud security and AppSec practice.
Tech Stack
Categories
About Flagship Pioneering, Inc.
Flagship Pioneering is a biotechnology company that invents and builds platform companies, each with the potential for multiple transformative human health and sustainability products. Since its launch in 2000, Flagship has originated and fostered more than 100 scientific ventures. The current Flagship ecosystem comprises over 40 companies, including Denali Therapeutics, Foghorn Therapeutics, Generate:Biomedicines, Inari, Indigo Agriculture, and Tessera Therapeutics.