Security Engineer

About the role

We're looking for an experienced, hands‑on Security Engineer to secure XBOW's product, cloud, and platform as we scale. This technical individual contributor role focuses on building security into design, shipping, and operations, working closely with engineering and platform teams.

Key responsibilities

• Design and implement security controls across cloud, infrastructure, and internal platforms.
• Partner with engineering to harden cloud architecture, IAM, and infrastructure.
• Own product security reviews for new features, services, and major architecture changes.
• Drive threat modeling and secure design decisions early in the SDLC.
• Operate and improve AppSec workflows (SAST, SCA, secrets scanning, IaC scanning).
• Define and run the vulnerability management lifecycle, including intake, prioritization, validation, and reporting.
• Improve Kubernetes and container security posture and monitor security events.
• Build automation to enhance security operations, access workflows, and incident response.

Required profile

• 5+ years of experience in security engineering, product security, or cloud/platform security.
• Strong hands‑on experience securing multi‑cloud environments (AWS, Azure, GCP).
• Proven ability to own technical security problems end‑to‑end in fast‑moving settings.
• Experience with threat modeling, secure design reviews, and vulnerability triage with risk‑based SLAs.
• Background in operating AppSec tooling at scale and improving CNAPP coverage.
• Ability to collaborate with developers and platform teams to ship secure defaults.

Required skills

• AWS
• Azure
• GCP
• Kubernetes
• Container security
• SAST
• SCA
• Secrets scanning
• IaC scanning
• CNAPP
• Vulnerability management
• Threat modeling
• Incident response
• Automation scripting

What we offer

• Competitive salary, stock options, comprehensive benefits and 401k plan.
• Opportunity to learn from top security and AI experts.
• Impactful work on complex technical challenges supporting the company foundation.
• Remote‑first environment with flexibility to work from anywhere.