3 months ago
Chicago, IL, USA +5 moreMid Level
Base Salary
$131k - $169k/yr
Responsibilities
- Embed security into feature design and development through design reviews and threat modeling
- Balance security risks with delivery needs and communicate issues to nontechnical stakeholders
- Assess risks introduced by AI tools, integrations, and AI-generated code
- Apply AI-assisted tooling to triage, threat detection, code review, and documentation
- Review cloud-hosted systems, corporate IT security processes, and security detections across multiple security domains
- Configure and tune application security tooling and incorporate it into build and deployment pipelines
- Support remediation of vulnerabilities, penetration-test findings, and security reports
- Contribute to security-focused alerting, detections, automations, training, metrics, and the security roadmap
Requirements
- 4+ years of experience in a security or development role
- Experience reviewing software designs and implementations, triaging security issues, coordinating remediation, and testing fixes
- Experience working with penetration testing providers and conducting risk and vulnerability assessments for web applications, APIs, suppliers, and integrations
- Experience configuring SAST, SCA, and DAST tools and integrating security tooling into GitHub Actions or Azure DevOps YAML pipelines
- Experience with security alerting, detections, automations, security training, EDR alerts, MDM, and security roadmaps
- Strong spoken and written communication skills
- Some experience with Microsoft .NET/C#, JavaScript, React, EmberJS, and Python
- Working knowledge of Azure, AWS, or GCP, with Azure used predominantly
- Working knowledge of PowerShell or Bash and Python
- Working knowledge of an AI development tool such as Claude Code or GitHub Copilot
- Working knowledge of PortSwigger Burp or similar tooling
- Experience securing AI applications, systems, or AI tooling is highly regarded
- Security certifications such as OSCP, AWAE, GIAC, Burp Practitioner, PJPT, or Microsoft/AWS development and cloud certifications are desirable
Benefits
- Flexible time off, with four weeks encouraged annually
- Company-paid medical insurance for employees and eligible dependents
- Paid dental and vision insurance for employees and eligible dependents
- 401(k) with company matching
- Flexible Spending Account
- Up to eight weeks of paid parental leave
- Work-from-home stipend
- Global experience across Australia, New Zealand, the United Kingdom, and Canada
Tech Stack
Categories
About Karbon
Karbon is the collaborative practice management platform for accounting firms. It brings your team, clients, systems, and data together in one place, significantly improving visibility, efficiency, and connectivity no matter where your people are located.