Назад
Company hidden
2 дня назад

Senior Engineer, Security (AWS)

Формат работы
remote (только USA)
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior Engineer, Security (AWS): Remediating vulnerabilities across cloud infrastructure and applications with an accent on AWS security, Terraform-based fixes, threat modelling, and offensive testing. Focus on leading incident response and forensic investigations, improving Datadog detection coverage, and driving remediation through teams.

Location: Remote, associated with New York

Company

hirify.global is a cross-border fintech building remittance, card, savings, and payments products for emerging markets.

What you will do

  • Remediate infrastructure and application vulnerabilities by writing Terraform and application code, and drive fixes owned by other teams through verified completion.
  • Own AWS security across IAM, least privilege, network boundaries, secrets management, logging, host hardening, WAF configuration, and secure deployment patterns.
  • Run vulnerability management using findings from Snyk, Prowler, and ASV assessments.
  • Conduct penetration testing, threat modelling, and security reviews for new services and payment or custody integrations.
  • Lead security incidents, including forensic investigations, and improve Datadog detection coverage and alert quality.

Requirements

  • Five or more years of hands-on security engineering experience with production systems.
  • Ability to write and ship Terraform and Python, with enough application knowledge to fix vulnerabilities directly.
  • Deep AWS security experience, including organization-scale IAM and least privilege, plus ECS or EKS container workloads.
  • Experience with application security, threat modelling, offensive testing, incident response, forensic investigation, and vulnerability remediation.
  • Experience translating ISO 27001, PCI DSS, or SOC 2 requirements into engineering work in a regulated environment.
  • Remote role associated with New York.

Nice to have

  • Detection engineering with Datadog or a comparable SIEM.
  • Security experience with CI/CD pipelines, especially GitHub Actions.
  • Practical cryptography and secrets management experience, including key rotation and certificate lifecycle management.
  • Experience using AI coding tools for remediation at scale and reviewing AI-generated code securely.
  • Experience with payments, cards, or digital assets.

Culture & Benefits

  • Work with a global team of more than 250 people representing over 50 nationalities and 50 languages.
  • Values emphasize ownership, impact, humility, candid communication, and practical problem-solving.
  • Mission-driven work focused on improving access to cross-border financial services.
  • Inclusive equal opportunity workplace with reasonable adjustments available during the recruitment process.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →