Senior Security Engineer

Kong
Milan
Workplace: HybridFull timeFunction: CybersecurityExperience: 5+ yearsSkills: ["Leadership","Mentoring","Problem-solving","Communication"]

Senior Security Engineer leading threat defense and secure design efforts for Kong Gateway. You’ll architect next-gen WAF/IDS/IPS, design multi-cloud Zero Trust security across AWS/Azure/GCP, shape multi-year security roadmap, drive incident response for supply chain and CVEs, and mentor engineers to foster a Security-First culture across a high-traffic API security platform.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Kong
Kong
5 months ago

Senior Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 9 hours agoStatus: Live

Job Summary

Senior Security Engineer leading threat defense and secure design efforts for Kong Gateway. You’ll architect next-gen WAF/IDS/IPS, design multi-cloud Zero Trust security across AWS/Azure/GCP, shape multi-year security roadmap, drive incident response for supply chain and CVEs, and mentor engineers to foster a Security-First culture across a high-traffic API security platform.
Location: Milan
Workplace: Hybrid
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Sr. Manager level

Key Responsibilities

  • •Threat Defense Leadership: Architect and implement next-generation WAF, IDS, and IPS capabilities at the gateway level to protect against OWASP Top 10, zero-day exploits, and sophisticated API abuse.
  • •Multi-Cloud Security: Design and implement “Zero Trust” security models that operate seamlessly across hybrid and multi-cloud environments (AWS, Azure, GCP, On-prem).
  • •Strategic Roadmap: Partner with Product and Architecture leads to define the multi-year security roadmap for Kong Gateway, balancing OSS community needs with Enterprise requirements.
  • •Incident Resolution: Lead the response to complex, multi-faceted security challenges—from supply chain vulnerabilities in open-source dependencies to high-stakes CVE remediations.
  • •Mentorship & Influence: Mentor engineers on secure coding practices and influence the long-term cybersecurity maturity of the organization.

Key Requirements

  • •5+ years of Cybersecurity Engineering experience, with a focus on high-traffic infrastructure or API management.
  • •Cloud-Native & Multi-Cloud design experience, securing traffic across multiple cloud providers and Kubernetes environments.
  • •Proven track record in designing/deploying WAF, IDS, and IPS at scale, with understanding of signature-based vs. ML-based detection.
  • •Programming proficiency in Python, Go or Rust.
  • •Open Source contributor experience is a significant asset.
Experience:5+ years
Skills:LeadershipMentoringProblem-solvingCommunication
Languages:English
Tech Stack:PythonGoRustWAFIDSIPSKubernetesAWSAzureGCPOpen Source

Company Brief

Kong
Provides a cloud-native API and service connectivity platform (Kong Gateway, Konnect, Kuma, Insomnia) that secures, manages, and observes APIs and microservices for enterprises across cloud and hybrid environments.
Industry: API Platforms
Company Size: Large (251 to 1,000 employees)
Revenue: USD 100M to 250M
Growth: Scaleup
Valuation: Unicorn (USD 1B+)
Funding: Series E+
Headquarters: San Francisco, United States
Founded: 2017
Glassdoor
Glassdoor: 3.9
WebsiteLinkedInGlassdoor