Responsibilities

The Senior Security Engineer will maintain threat models and other security-related system documentation, coordinate penetration testing with an independent test team and triage and drive resolution of any identified issues, perform white-box security testing of security-critical features, participate in the design process for application features and AWS platform infrastructure by defining security requirements and reviewing designs, participate in the design and implementation of controls for regulatory and standards compliance, define internal best practices for secure development and data handling, including key material management, identify SIEM tooling needs and help select suitable solutions, maintain the security incident response plan and lead incident response in case of a security event, understand the threat environment and establish and maintain monitoring for endpoints and application systems, and share knowledge with other engineering roles to improve overall understanding of security topics.