9 months ago
Base Salary
$180k - $310k/yr
Responsibilities
- Design and implement security controls across AWS infrastructure and the application layer.
- Build security tooling and automation to detect, prevent, and respond to threats at scale.
- Conduct architecture, code, and infrastructure security reviews.
- Lead vulnerability management, coordinate bug bounty responses, and prioritize remediation.
- Develop and maintain security monitoring, alerting, and incident response capabilities.
- Partner with engineering teams on secure coding practices and threat modeling.
- Deploy AI-assisted vulnerability scanning and automated triage workflows across code and infrastructure.
- Drive adoption of memory-safe languages and secure-by-design practices informed by CISA and NCSC guidance.
- Lead initiatives for compliance frameworks including SOC 2 and ISO 27001.
Requirements
- 5+ years of software engineering experience, including at least 2–3 years focused on security engineering or application security.
- Strong hands-on experience securing AWS environments, including IAM, VPC, security groups, CloudTrail, and GuardDuty.
- Proficiency in at least one backend language, preferably Python, TypeScript/Node.js, or Go, with experience building security tools.
- Deep understanding of web application security, OWASP Top 10, vulnerability classes, authentication and authorization patterns, CI/CD security controls, and infrastructure as code using Terraform or CloudFormation.
- Experience with penetration testing, offensive security, and SIEM/log analysis.
- Clear communication and ability to work embedded with product engineering teams.
- Experience at a high-growth SaaS startup, AI/ML security tooling, zero trust architecture, identity-aware access controls, supply chain security frameworks, SLSA, OpenSSF Scorecard, or SBOM tooling are preferred.
Benefits
- Benefits and equity are offered.
- Strong in-office culture in San Francisco, with work in person 4–5 days per week and flexibility to work from home when focus matters most.
- Full-time position spanning multiple internal levels depending on qualifications.
About Gamma
Gamma is your AI design partner for creating presentations, websites, social media, and more. All at the speed of thought.