Security Engineer – Product Security

About the role

We are seeking an experienced Security Engineer with a specialization in product security to join Cape’s team. You will leverage cloud and application security expertise to reduce risk across our AWS environments, mobile core infrastructure, and mobile applications.

Key responsibilities

• Design, implement, and manage robust security controls and policies within AWS, ensuring confidentiality, integrity, and availability of data and services.
• Perform comprehensive security assessments of cloud environments, identify vulnerabilities, assess risks, and recommend mitigation strategies.
• Lead integration of security practices into the DevOps lifecycle, promoting secure development, deployment, and operations.
• Utilize and optimize AWS security tools such as GuardDuty, Inspector, IAM, KMS, WAF, and Shield, and evaluate third‑party solutions.
• Address findings from penetration tests and security audits, ensuring prompt remediation.
• Stay current on emerging threats, compliance mandates, and best practices, providing strategic guidance.
• Mentor junior security team members and engineers to foster a security‑aware culture.
• Collaborate with stakeholders to embed security requirements into engineering projects and business initiatives.

Required profile

• Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience); advanced degrees or certifications (e.g., CISSP, AWS Certified Security Specialty) are a plus.
• Minimum 5 years of information security experience, with at least 3 years focused on AWS cloud security.
• Deep understanding of AWS architecture and security services, and proven ability to secure cloud applications and data.
• Proficiency with infrastructure‑as‑code tools such as Terraform or AWS CloudFormation and automation of security tasks.
• Strong scripting skills in Python, TypeScript, or Go for security automation.
• Experience securing containerized and microservice architectures.

Required skills

• AWS security services (GuardDuty, Inspector, IAM, KMS, WAF, Shield)
• Infrastructure‑as‑code (Terraform, AWS CloudFormation)
• Python, TypeScript, Go scripting
• Containerization and microservices security
• Network security, encryption technologies, secure coding practices

What we offer

• Competitive salary range $200,000–$255,000 (US) plus equity.
• 401(k) match and 100 % coverage of medical, dental, and vision premiums for the employee.