Senior Security Engineer

Position summary

We have an immediate opening for a Senior Security Engineer in Los Angeles. Security engineering role focused on identity, cloud configuration and detection. You'll work closely with platform and IT. On site, Los Angeles.

What you'll be doing

• Run threat modeling sessions with engineering teams on new features and architecture changes
• Review code and pull requests for security issues
• Coordinate external penetration tests and track remediation
• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security
• Write secure coding guidelines and run developer training
• Assess third-party vendors and SaaS integrations for security risk
• Triage bug bounty reports from HackerOne or Bugcrowd
• Design and maintain SSO, MFA and conditional access with Okta or Entra ID

Qualifications

• 5-7 years in security engineering, application security or a related engineering role
• Experience with SIEM, EDR or vulnerability management tools
• Familiarity with SOC 2, ISO 27001, PCI DSS or HIPAA requirements
• Ability to explain security issues to engineers without lecturing them
• Programming or scripting ability in Python, Go or similar

What you get

$205,000 - $235,000 per year

• Health insurance
• 401(k) with 4% match
• Paid holidays

A bit about us

We are a small, self-funded team building a booking app for independent salons and tattoo studios. Our product started as a side project in 2016 and now has a few hundred paying customers, mostly in California. Most engineers work remotely and come into the office one week a quarter for planning.

We are unable to sponsor visas for this position.

Start: Flexible.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Harris Cloud LLC.