Lead Security Engineer

What you'll do

• Design and evolve distributed systems for reliability, scalability, and security across private and public cloud environments.
• Write high-quality, maintainable code using Java and Python to build production-ready services.
• Utilize enterprise-authorized AI tools to perform threat modeling, vulnerability analysis, and security documentation.
• Identify and remediate architectural risks, technical debt, and systemic quality gaps before they impact production.
• Review design proposals and code changes for correctness, resilience, and long-term maintainability.
• Manage end-to-end production behavior including performance monitoring, incident response, and post-incident improvements.
• Champion software development lifecycle practices such as automated testing, release hygiene, and rollback planning.
• Ensure all systems continuously meet security, audit, and compliance requirements in a regulated environment.

What we're looking for

• Formal training or certification on security engineering concepts and 5+ years of applied experience.
• Demonstrated experience designing and operating cloud-native systems in production environments.
• Strong proficiency in Java and/or Python with a track record of delivering high-quality, maintainable code.
• Experience designing and working with relational and NoSQL databases like DynamoDB or MongoDB in production systems.
• Experience using enterprise-authorized AI capabilities to support security engineering workflows while ensuring data sensitivity and validation.
• Solid understanding of software engineering best practices including automated testing, CI/CD, and release management.
• Experience owning production systems, including incident management, on-call responsibilities, and post-incident reviews.
• Excellent written and verbal communication skills to articulate technical decisions to both technical and non-technical audiences.
• Experience working in regulated or highly controlled environments such as financial services, healthcare, or government (preferred).
• Deep understanding of cloud and event-driven architectures and their security implications (preferred).
• Familiarity with security compliance frameworks and audit-defensible engineering practices (preferred).
• Strong grasp of operational excellence principles including monitoring, alerting, and observability strategies (preferred).
• Experience with networking concepts in cloud environments, such as VPCs, security groups, and traffic management (preferred).