Staff Security Engineer, IAM Job at DELIVER (London)

Staff Security Engineer, Enterprise Security Architecture

Aurora’s mission is to deliver the benefits of self-driving technology safely, q...

Location

United States , Detroit

Salary:

171000.00 - 273000.00 USD / Year

Aurora Innovation

Expiration Date

Until further notice

Requirements

10+ years of professional experience in Information Security, Enterprise Architecture, Security Engineering, or related technical leadership capacities
5+ years specifically focused on designing enterprise-scale security architectures across diverse domains, including endpoint, network, infrastructure, vulnerability management, resilience, and enterprise platforms
Demonstrated success in developing enterprise security architecture strategies, reference architectures, and scalable technical standards
Extensive technical depth in Zero Trust principles, enterprise security frameworks, and modern backend or enterprise security architecture design patterns
Comprehensive knowledge of core enterprise security domains, including endpoint security, network security, PKI, enterprise vulnerability management, resilience, data protection, and governance integration
Proven ability to translate governance, compliance, and strategic business requirements into actionable technical architecture and implementation guidance
Experience representing security interests within architecture review boards, governance committees, or enterprise-wide design councils
Advanced familiarity with enterprise infrastructure, SaaS ecosystems, internal platforms, and the strategic integration of security tooling
Adept at evaluating technical tradeoffs, identifying scalability constraints, and assessing the long-term implications of enterprise security architecture decisions
Exceptional documentation skills, including the creation of detailed architecture diagrams, technical standards, and strategic narratives for executive leadership

Job Responsibility

Define and champion Aurora’s enterprise security architecture strategy, roadmap, and target-state operating model across enterprise and backend operational security domains
Develop enterprise security reference architectures, design patterns, and technical standards for endpoint security, network security, infrastructure security, enterprise vulnerability management, data protection, resilience, enterprise platforms, and security tooling
Translate security strategy, governance requirements, and business priorities into scalable technical architecture and implementation guidance
Partner with GRC to operationalize security policies, standards, and control objectives into practical enterprise security architectures
Support and influence Aurora’s broader Enterprise Architecture Committee by representing enterprise security priorities, technical standards, and strategic design principles
Participate in architecture review boards, design committees, and strategic planning forums to ensure enterprise security alignment across major initiatives
Architect secure solutions for workforce platforms, enterprise systems, internal infrastructure, and backend operational ecosystems using Zero Trust principles and modern security frameworks
Guide enterprise security design for endpoint security, network security, PKI, enterprise vulnerability management, BCP/DR, data security, enterprise infrastructure, and security tooling modernization
Provide architectural oversight for major enterprise security initiatives, ensuring scalability, interoperability, governance alignment, and reduced fragmentation
Partner with Security Engineering, GRC, Cloud Security, IT, Product Security, and IAM teams to align technical security capabilities while maintaining clear domain boundaries

What we offer

Annual bonus
Equity compensation
Benefits

Fulltime

Staff Security Engineer

We’re looking for an experienced security-focused engineer to help shape and sca...

Location

United States , San Francisco

Salary:

235000.00 - 280000.00 USD / Year

Parafin

Expiration Date

Until further notice

Requirements

8+ years of experience in security operations or application security, preferably in a cloud-native and regulated environment
Strong understanding of AWS security, including IAM, VPC, and network segmentation best practices
Experience with threat detection and response, vulnerability management, and incident response workflows
Familiarity with Kubernetes and container security principles, including RBAC, admission controls, and runtime monitoring
Knowledge of compliance frameworks (SOC 2, PCI DSS, ISO 27001) and how to operationalize them in engineering environments
Strong communication and collaboration skills — comfortable working across engineering, product, and compliance teams

Job Responsibility

Lead efforts to improve Parafin’s overall security posture across infrastructure, applications, and data systems
Develop and maintain frameworks for identity, access management, and least-privilege enforcement
Establish and operate best-in-class security monitoring, alerting, and incident response processes
Partner with product and infrastructure engineers to embed secure-by-default patterns in our systems and applications
Define and enforce standards for vulnerability management, secrets handling, and dependency integrity
Collaborate with compliance and risk teams to build and maintain controls aligned with frameworks such as SOC 2, PCI DSS, and other fintech regulations
Support audits and security assessments by ensuring controls are properly implemented and evidenced
Contribute to security awareness and training efforts across engineering teams
Influence long-term strategy on secure architecture, detection, and response automation

What we offer

Equity grant
Medical, dental & vision insurance
Unlimited PTO
Work From Home flexibility
Commuter benefits
Free lunches
Paid parental leave
401(k)
Employee assistance program

Fulltime

Staff Security Engineer, Cloud

Rogo is hiring a Staff Cloud Security Engineer to lead the design and implementa...

Location

United States , New York City

Salary:

Not provided

Rogo

Expiration Date

Until further notice

Requirements

Have built cloud security platforms or foundational infrastructure in AWS and GCP, not just consumed managed services
Are deeply fluent in Terraform, including large-scale state management, module design, and safe rollout strategies
Think in terms of secure systems and primitives, not one-off controls or point solutions
Have strong opinions on cloud IAM and networking design, informed by real-world failures and incident response
Are comfortable operating in ambiguous environments and defining long-term technical direction
Prefer automation, code, and guardrails over documentation and manual review
Can influence architecture through technical depth rather than organizational authority

Job Responsibility

Architect and implement cloud security foundations across AWS and GCP, including account/project structure, IAM models, network segmentation, and secure service-to-service communication
Own and author Terraform-based security architecture
Design and operate cloud identity systems at scale, including workload identity, service accounts, role assumption, and cross-cloud access patterns
Lead the security design of cloud networking, including VPC architecture, private connectivity, egress control, firewalling, and isolation boundaries
Build and maintain security automation across CI/CD and cloud environments, eliminating manual processes and reducing operational risk
Own Kubernetes and container security for production workloads (GKE/EKS), including cluster hardening, RBAC, workload identity, image security, and runtime controls
Define and implement logging, monitoring, and detection pipelines that provide high-signal visibility into cloud security posture and incidents
Perform threat modeling and architectural reviews for new infrastructure and platform changes, driving security decisions with technical authority
Act as a technical multiplier: reviewing critical infrastructure changes, mentoring engineers, and raising the overall security bar across the organization

What we offer

Exceptional traction: strong PMF with the world's largest investment banks, hedge funds, and private equity firms
World-class team: we take talent density seriously. We like working with incredibly smart, driven people
Velocity: we work fast, which means you learn a lot and constantly take on more
Frontier technology: we're developing cutting-edge AI systems, pushing the boundaries of reinforcement learning and published research, redefining what's possible, and inventing the future
Cutting Edge Product: Our platform is state-of-the-art and crazily powerful. We're creating tools that make people smarter, reinventing finance works

Fulltime

Sr. Staff Security Engineer

Our mission is to protect, defend, and secure Uber’s products, infrastructure an...

Location

United States , Sunnyvale; Seattle; New York

Salary:

267000.00 - 297000.00 USD / Year

Uber

Expiration Date

Until further notice

Requirements

Bachelor’s Degree or equivalent in Computer Science, Engineering, Information Security or related field
10+ years full-time work experience in security engineering, with a strong focus on security defense and incident response
Deep technical expertise in multiple security domains, such as network security, endpoint security, cloud security (GCP, OCI, Azure, AWS), and identity and access management
Strong scripting and automation skills (e.g., Python, PowerShell, Bash, Golang) are highly desirable
Proven experience designing, implementing, and managing complex security solutions at an enterprise level
Excellent analytical and problem-solving skills, with the ability to diagnose and resolve complex security issues
A proactive and results-oriented mindset with a passion for staying ahead of the evolving threat landscape
Experience leading technical security projects and mentoring other engineers
Excellent communication, collaboration, and interpersonal skills, with the ability to effectively communicate technical information to diverse audiences

Job Responsibility

Lead the technical direction and architecture of our cyber security defense capabilities, including areas such as enterprise security posture management, threat detection and response, and vulnerability management
Design and implement robust and scalable security solutions leveraging a diverse range of technologies (e.g., SIEM, EDR, SOAR, cloud security platforms, IAM)
Lead incident response efforts, including investigation, containment, and recovery activities. Perform post-incident analysis and recommend improvements to prevent future occurrences
Proactively research and evaluate emerging security threats, technologies, and trends, and provide recommendations for their adoption to enhance our security posture
Collaborate effectively with cross-functional teams, including Engineering, IT, Legal, and Compliance, to integrate security considerations into the development lifecycle and business processes
Mentor and provide technical guidance to junior security engineers, fostering a culture of continuous learning and growth within the team
Contribute to the development and automation of security tools and processes to improve efficiency and effectiveness
Communicate complex security concepts and risks effectively to both technical and non-technical audiences
Participate in security audits and compliance initiatives, providing technical expertise and ensuring adherence to security standards

What we offer

eligibility to participate in Uber's bonus program
may be offered an equity award & other types of comp
eligible for various benefits

Fulltime

Staff Security Software Engineer

The Role : We're looking for a seasoned Security Software Engineer to join our I...

Location

United States

Salary:

160200.00 - 246300.00 USD / Year

General Motors

Expiration Date

Until further notice

Requirements

Bachelor’s degree in Computer Science, Cybersecurity, or related field (or equivalent experience)
9+ years of experience in the administration, configuration, and support of IAM products including: EntraID, SailPoint or other similar products
Advanced proficiency in one or more programming languages (e.g., Python, Go, Java, C++)
Experience with cloud platforms (AWS, Azure, GCP) and containerization (Docker, Kubernetes)
Strong understanding of authentication, authorization, encryption, and secure coding practices
Experience working with security and audit teams
Ability to self-manage time and maintain an excellent work ethic in an Agile environment
Able to convey identity requirements and concepts across different levels of users
Strong verbal and written communication skills

Job Responsibility

Design and develop security-focused software solutions, tools, and automation frameworks
Integrate security into CI/CD pipelines and cloud-native environments
Collaborate with infrastructure and application teams to embed security into system architecture
Conduct code reviews and threat modeling to identify and remediate vulnerabilities
Build and maintain systems for monitoring, logging, and alerting on security events
Develop and maintain APIs and microservices that support security operations
Participate in incident response and forensic investigations as needed
Stay current with emerging threats, vulnerabilities, and security technologies

What we offer

Medical
Dental
Vision
Health Savings Account
Flexible Spending Accounts
Retirement savings plan
Sickness and accident benefits
Life insurance
Paid vacation & holidays
Tuition assistance programs

Fulltime

Staff Engineer, Offensive Security

The Staff Engineer acts as a Technical Lead. You don't just find bugs; you desig...

Location

Ireland

Salary:

Not provided

Stytch

Expiration Date

Until further notice

Requirements

7-10 years in offensive security, penetration testing, a high-volume bug bounty background, AppSec, or vulnerability exploitation
track record of finding high/critical vulnerabilities in complex environments using pentesting commercial or custom tools
Expert Knowledge and solid understanding of the MITRE ATT&CK matrix and the OWASP Top 10 for web applications and top 10 for LLMs
post exploitation (lateral movement, persistence, data exfiltration) and Adversarial ML
Proficient in OffSec popular tools like Burp Suite professional, Nmap, Metasploit, Wireshark etc... and AI security tools such as LangChain, TensorFlow for adversarial testing or, as well as use of C2 frameworks (Cobalt Strike, Sliver, Havoc) or similar tools
Ability to write functional scripts in Python or Bash to automate repetitive testing tasks
proficiency in coding and scripting like Python, C++, and scripting for creating custom offensive exploits that avoids signature-based detection
Possession of advanced industry certifications such as OSCP, OSEP, OSWE, GXPN or similar training in OffSec tracks is highly desirable

Job Responsibility

Full-Stack Penetration Testing: Perform manual and automated testing of web applications, APIs, and mobile apps (iOS/Android)
Internal/External Network Audits: Conduct network and cloud level assessments with various tooling
Vulnerability Validation: Triage and validate reports from automated scanners or bug bounty hunters to eliminate false positives and escalate true positives
AI/LLM Probing: Perform initial prompt injection and jailbreak tests on AI prototypes, services, and applications using established checklists (OWASP Top 10 for LLMs)
Technical Reporting: Draft high-quality reports that detail the 'path to compromise' with clear, reproducible steps for developers
Tool Maintenance: Manage and update the team's testing infrastructure (e.g., Burp Suite, and basic C2 listeners)
Remediation Support: Provide direct technical guidance to engineering teams on how to patch vulnerabilities like XSS, SQLi, and IDOR
Adversary Emulation: Design and lead multi-week Red Team operations that mimic specific threat actors (APTs) to test the SIRT detection capabilities
Custom Exploit Development: Build custom payloads, droppers, and obfuscated scripts to bypass EDR/AV and maintain stealth
AI Red Teaming Architecture: Build automated testing frameworks for AI systems (e.g., using PyRIT, Promptfoo, or Garak) to test for models related to sensitive data leakage

What we offer

competitive pay
generous time off
ample parental and wellness leave
healthcare
a retirement savings program

Staff Infrastructure Security Engineer

We’re seeking a Staff Infrastructure Security Engineer to architect and operatio...

Location

United States , San Francisco; Bellevue; Sunnyvale; Denver

Salary:

210000.00 - 265000.00 USD / Year

Crusoe

Expiration Date

Until further notice

Requirements

8+ years of hands-on experience in cloud security, DevOps, or infrastructure engineering
Deep, production-grade experience deploying and operating HashiCorp Vault in enterprise environments (Enterprise edition strongly preferred)
Expert knowledge of secrets management, cryptography, PKI/X.509 certificate authorities, and trust systems
Strong experience with Google Cloud Platform (GCP) and cloud-native IAM models
Proven expertise using Infrastructure-as-Code tools (Terraform) to automate security platforms
Hands-on experience with Kubernetes and securely integrating secrets into microservices architectures
Fluency in at least one programming language (Go or Python preferred) for automation and tooling
Strong understanding of network security fundamentals, including segmentation, firewalls, routing, and Zero Trust concepts

Job Responsibility

Architecting a highly available, disaster-resilient, multi-cluster secrets management platform as the foundation of our Zero Trust strategy
Driving Vault from PoC to enterprise-grade production, establishing standards, reliability, and scalability
Leading cross-functional alignment with Cloud Engineering, DevOps, and SRE teams on secure secret management workflows embedded into the SDLC
Designing and enforcing governance controls to meet internal policies and external compliance requirements (e.g., SOX, ISO 27001)
Implementing Policy as Code using Sentinel to automate guardrails and access decisions
Engineering Vault infrastructure using Terraform with fully automated, reproducible, and version-controlled deployments
Architecting integrations between Vault, identity providers (e.g., Okta), and workload identities (e.g., Kubernetes Service Accounts)
Configuring and tuning core Vault secrets engines (KV, Transit, KMIP) and Enterprise features such as performance replication and automated sealing
Operationalizing “Vault as a Service” through paved-road onboarding, self-service workflows, and clear developer documentation
Building observability across the platform, including monitoring, alerting, audit logging, and usage insights

What we offer

Industry competitive pay
Restricted Stock Units in a fast growing, well-funded technology company
Health insurance package options that include HDHP and PPO, vision, and dental for you and your dependents
Employer contributions to HSA accounts
Paid Parental Leave
Paid life insurance, short-term and long-term disability
Teladoc
401(k) with a 100% match up to 4% of salary
Generous paid time off and holiday schedule
Cell phone reimbursement

Fulltime

Staff Platform Security Engineer

Fivetran is building data pipelines to power the modern data stack for thousands...

Location

United States , Oakland

Salary:

196033.00 - 245041.50 USD / Year

Fivetran

Expiration Date

Until further notice

Requirements

Application Security Expertise: Deep expertise in identifying and mitigating security vulnerabilities within applications (e.g., OWASP Top 10), particularly in Java codebases.
Secure SDLC: Extensive experience integrating security into the software development lifecycle, from design and code review to testing and deployment.
Java Proficiency: Senior-level experience with Java codebases: building, running, profiling, and optimizing Java applications in secure environments.
Container Security: Strong experience with Docker image creation, optimization, and vulnerability mitigation, specifically for applications.
CI/CD & Automation: Proficiency with CI/CD tools (e.g., Jenkins, GitLab CI, GitHub Actions) and experience integrating security tools into automated pipelines.
Tooling Familiarity: Familiarity with a range of security tools for CI/CD security, static analysis (SAST), dynamic analysis (DAST), dependency analysis (SCA), and secrets management.
Adversarial AI & Defense: Familiarity with modern attack techniques, offensive security methodologies, and defense strategies, including OWASP Top 10 for LLMs (e.g., Prompt Injection, Data Poisoning, and Model Inversion).
Scripting: Proficiency in scripting or programming languages (e.g., Bash, Python, Go) to automate security processes and tool integration.
Problem-Solving: Excellent problem-solving and troubleshooting skills, with the ability to work independently in fast-paced environments.
Communication: Strong communication skills with the ability to effectively collaborate with and educate engineering teams on security principles and best practices.

Job Responsibility

Collaborate with engineering teams to integrate and manage security tooling within the SDLC, strategically automating security checks and feedback loops to enhance efficiency and security posture.
Perform vulnerability scanning and participate in penetration testing exercises, automating scanning processes judiciously to identify common weaknesses, while reserving manual efforts for complex and nuanced assessments. Report findings and assist with remediation efforts.
Develop and maintain automation scripts and infrastructure-as-code for security checks related to machine configurations, container images, IAM policies, firewall rules, and cloud storage policies.
Implement and configure security controls within enterprise applications based on security best practices and architectural guidance.
Contribute to threat modeling efforts by providing technical insights and implementing identified security controls.
Work directly with engineering teams to troubleshoot and resolve security challenges across the stack while promoting a security-first mindset, identifying and automating recurring troubleshooting steps or remediation processes where it significantly improves response times and reduces manual intervention.
Implement and operationalize security solutions for cloud-native and hybrid infrastructure based on architectural guidelines.
Collaborate with infrastructure and cloud security teams to implement and maintain security controls across the entire technology stack, strategically prioritizing automation for consistent enforcement, monitoring, and alerting to improve overall security and reduce manual overhead.
Implement and manage security assessment tools, including vulnerability scanners, SIEM agents, DLP endpoints, and EDR sensors.
Participate in security assessment reviews by providing practical implementation feedback and identifying potential operational challenges.

What we offer

100% employer-paid medical insurance*
Generous paid time-off policy (PTO), plus paid sick time, inclusive parental leave policy, holidays, and volunteer days off
RSU stock grants*
Professional development and training opportunities
Company virtual happy hours, free food, and fun team-building activities
Monthly cell phone stipend
Access to an innovative mental health support platform that offers personalized care and resources in areas such as: therapy, coaching, and self-guided mindfulness exercises for all covered employees and their covered dependents.

Fulltime

Select Country

Staff Security Engineer, IAM

Job Description

Job Responsibility

Requirements

Nice to have

What we offer

Looking for more opportunities?

Staff Security Engineer, IAM

Staff Security Engineer, Enterprise Security Architecture

Staff Security Engineer

Staff Security Engineer, Cloud

Sr. Staff Security Engineer

Staff Security Software Engineer

Staff Engineer, Offensive Security

Staff Infrastructure Security Engineer

Staff Platform Security Engineer

Our AI answers in your language