Sr. Security Engineer

ConductorOne
San Francisco, New York
Workplace: OnsiteFull timeUSD 100,000 - 200,000 annuallyFunction: CybersecuritySkills: ["Security judgment","Collaboration","Problem-solving","Risk assessment","Automation mindset"]

Join a small, early-stage security team as a generalist security engineer across application and cloud security and compliance. You’ll define secure-by-default standards, build agents and automation that orchestrate risk-based security throughout the development lifecycle, and implement security observability and detection signals. Lead threat modeling and risk assessments, partner with engineers on remediation and API security, and help advance compliance initiatives like SOC 2 and ISO 27001/42001.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
ConductorOne
ConductorOne
2 days ago

Sr. Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 13 hours agoStatus: Live

Job Summary

Join a small, early-stage security team as a generalist security engineer across application and cloud security and compliance. You’ll define secure-by-default standards, build agents and automation that orchestrate risk-based security throughout the development lifecycle, and implement security observability and detection signals. Lead threat modeling and risk assessments, partner with engineers on remediation and API security, and help advance compliance initiatives like SOC 2 and ISO 27001/42001.
Location: San Francisco, New York
Workplace: Onsite
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Define and drive security standards and secure-by-default solutions for application and/or cloud security.
  • •Build purpose-built agents and skills to orchestrate security in the development lifecycle via risk-based automation (triage, enrichment, review).
  • •Shift security left by baking risk-based review into design specs and architecture decisions.
  • •Build scalable security tooling and automation, including security observability and detection signals.
  • •Lead threat modeling and risk assessment for high-risk features and platform changes, and partner with engineering to remediate critical threats and conduct security code reviews.

Pay and Benefits

Salary: USD 100,000 - 200,000 annually
Equity and Bonus:Equity
Perks:Health Insurance

Key Requirements

  • •Proven experience securing enterprise SaaS applications, including authentication flows, authorization patterns, and input validation at API boundaries.
  • •Experience securing deployment and change-management mechanisms for software and infrastructure.
  • •Background in software engineering, platform engineering, systems engineering, network engineering, cloud security, or application security.
  • •Hands-on code review experience, ideally in Go, Python, or Rust.
  • •Comfort working with AWS (or another major cloud provider) across cloud infrastructure and in fast-paced environments.
Experience:SaaSIdentity and access managementEnterprise security
Skills:Security judgmentCollaborationProblem-solvingRisk assessmentAutomation mindset
Tech Stack:GoAWSPythonRustKubernetesService meshConsulEnvoyCiliumVaultIstioSOC 2ISO 27001ISO 42001

Company Brief

ConductorOne
Provides identity infrastructure and access governance platform to help security and IT teams manage, automate, and secure user access across SaaS applications and cloud infrastructure.
Industry: Cybersecurity
Company Size: Medium (51 to 250 employees)
Growth: Early Stage Startup
Funding: Series A
Headquarters: San Francisco, United States
Founded: 2020
WebsiteLinkedIn