Job Description :

Security Engineer III

We are looking for a seasoned Security Engineer III to help strengthen our organizations security posture across products, infrastructure, cloud environments, and operational processes. This role will work closely with engineering, IT, compliance, and leadership teams to identify risks, design practical security controls, and drive security improvements from architecture through day-to-day operations.

Responsibilities :

- Design, implement, and maintain security controls across cloud infrastructure, applications, endpoints, networks, and identity systems.

- Conduct security assessments, threat modeling, vulnerability management, and risk reviews for new and existing systems.

- Partner with engineering teams to embed secure development practices, including code review, security testing, and remediation guidance.

- Monitor, investigate, and respond to security incidents; contribute to incident-response playbooks and post-incident improvements.

- Improve detection and response capabilities through logging, alerting, SIEM, EDR, and automation tools.

- Lead or support audits and compliance initiatives, including evidence collection and control implementation.

- Stay current on emerging threats, especially in AI and generative-AI security, and translate them into actionable protections.

- Help define policies, standards, and security architecture patterns that scale with the business.

- Mentor junior security engineers and promote a security-first culture across teams.

Required Qualifications :

- 5+ years of relevant cybersecurity experience, preferably in a security engineering, application security, cloud security, or security operations role.

- Hands-on experience across multiple cybersecurity domains, such as cloud and infrastructure security, application security, identity and access management, vulnerability management, and incident response.

- Strong understanding of common security principles, threat models, attack techniques, and risk-management practices.

- Experience securing modern cloud-based environments and working with engineering teams in fast-paced product development.

- Familiarity with security tools and technologies such as SIEM, EDR, vulnerability scanners, IAM platforms, SAST/DAST, container security, and cloud security posture management tools.

- Strong communication skills, with the ability to explain technical risks and recommendations to both technical and non-technical stakeholders.

AI Security Expertise :

- Current knowledge of AI security risks, including prompt injection, data leakage, insecure model integrations, supply-chain risks, model abuse, and adversarial attacks.

- Experience evaluating or implementing security controls for AI-enabled products, LLM applications, AI agents, or machine-learning workflows is strongly preferred.

- Ability to develop practical guardrails for safe AI adoption, including data governance, access controls, monitoring, red-teaming, and secure integration patterns.

Preferred Qualifications :

- Experience working with systems compliant with, or preparing for, PCI DSS, ISO/IEC 27001, and SOC 2 requirements.

- Experience supporting compliance audits, control testing, risk assessments, and evidence management.

- Relevant certifications such as CISSP, CISM, CCSP, Security+, GIAC, OSCP, or cloud-security certifications.

- Experience in regulated industries such as fintech, payments, SaaS, healthcare, or enterprise technology.

- Familiarity with privacy and data-protection practices.

What Success Looks Like :

- Security risks are identified early and addressed pragmatically without slowing down the business.

- Engineering teams have clear, usable security guidance and stronger secure-by-default practices.

- Security monitoring, incident response, and compliance readiness continuously improve.

- The organization adopts AI capabilities responsibly, with appropriate safeguards in place.