Senior Security Engineer
##高级安全工程师 - 美国##**关于 VulnCheck** 剥削预防只能像智能驱动这些努力一样强大，大部分行业仍然运用缺乏利用环境的情报。我们正在聘请一名高级安全工程师与我们的工程团队一起工作，将安全嵌入我们如何构建和运输的过程中。你会与工程师合作进行设计审查，帮助加强平台随着其发展，并建立工具和自动化，使得安全可以扩展而不会让任何人放缓。你将向信息安全副总裁报告，并且有真正的自治来识别问题，自己和工程师协作解决方案。这是一个建筑者的角色。除了使用供应商工具，你还将编写代码和基础设施，使安全和合规工作成为可重复的自助服务流程，帮助企业自动化和改进今天手册内容，缩小我们如何检测和响应问题中的缺口，并为工程提供需要快速安全移动的防护和反环节。#####** **What You'll Do** **Partners with Engineering on Platform Security** - 直接与工程合作设计和架构审查，威胁建模以及新服务的默认模式进行安全评估- 在我们的云环境中审查和加强 IaC (EKS,Aurora,OpenSearch,S3,IAM) - 领导最不特权的 IAM 分解和推动平台中采用更强大的身份模式 - 与基础设施团队一起支持灾难恢复测试和弹性练习 **构建安全度衡量的工具** - 设计和构建自动化，将检测，响应和合规工作转换为可重复过程而不是人工努力 - 改善并扩大登录/离机自动化，警报分类管道以及识别/访问异常检测 - 建立内部工具，提供工程快速，自助方式来检查自己的安全姿势 #####**What Youll Bring** - 5年以上的安全工程，在 AWS 安全和基础设施作为代码 (Terra) 领域有实质深度。
查看英文原文
## Senior Security Engineer - US
### **About VulnCheck**
Exploitation prevention is only as strong as the intelligence driving those efforts, and most of the industry is still running on intelligence that lacks exploit context. VulnCheck, The Exploit Intelligence Company, delivers structured exploit intelligence on what is actively weaponized in the wild, purpose-built for the data lakes, ETL pipelines, automation, and AI and LLM workflows your infrastructure already runs on, raising the capability of everything it powers.
#### **About the Role**
We're hiring a Senior Security Engineer to work side-by-side with our engineering team, embedding security into how we build and ship — not bolting it on after the fact. You'll partner with engineers on design reviews, help harden the platform as it grows, and build the tooling and automation that lets security scale without slowing anyone down. You'll report to our VP of Information Security and have real autonomy to identify problems and build the solutions yourself and in collaboration with engineering.
This is a builder's role. In addition to use of vendor tools, you'll be writing code and infrastructure that turns security and compliance work into repeatable, self-service processes for the business helping to automate and improve what's manual today, closing gaps in how we detect and respond to issues, and giving engineering the guardrails and feedback loops they need to move fast safely.
##### **What You'll Do**
**Partner with Engineering on Platform Security**
- Work directly with engineering on design and architecture reviews, threat modeling, and secure-by-default patterns for new services
- Review and harden IaC across our cloud environments (EKS, Aurora, OpenSearch, S3, IAM)
- Lead least-privilege IAM decomposition and drive adoption of stronger identity patterns across the platform
- Support disaster recovery testing and resilience exercises alongside the infrastructure team
**Build Tooling That Scales Security**
- Design and build automation that turns detection, response, and compliance work into repeatable processes rather than manual effort
- Improve and extend onboarding/offboarding automation, alert triage pipelines, and identity/access anomaly detection
- Build internal tools that give engineering fast, self-service ways to check their own security posture
##### **What You’ll Bring**
- 5+ years in security engineering, with real depth in AWS security and Infrastructure-as-Code (Terraform/Terragrunt strongly preferred)
- Firm working knowledge of Kubernetes/EKS security — RBAC, network policies, pod security standards, image scanning, and cluster hardening
- Strong written communication — you'll document your own work, since we're a small, high-trust team
- A track record of building tools or automation that solved a security problem at scale, not just running existing tools
- Previous use of tools like Crowdstrike, Wiz, Security Hub
- Experience with golang
- Comfortable working directly with software engineers — in code reviews, design discussions, and incident response
- Incident investigation and RCA tracking
- Experience supporting a SOC 2 (or similar framework) program from the technical/evidence side
- Experience with Google Workspace as an identity/IdP source of truth
- Self-directed: you'll often be the only engineer working a problem end to end
**Preferred Qualifications**
- Exposure to offensive security or red/purple teaming
- Familiarity with Aurora or managed OpenSearch specifically
### **What We Offer**
We believe people do their best work when they feel supported, trusted, and valued. VulnCheck offers benefits designed to meet a wide range of needs and lifestyles, tailored to your country of employment:
- Generous, flexible time off
- Retirement/pension plan contributions (e.g., 401k with match in the US; local pension schemes elsewhere)
- Comprehensive healthcare coverage
- Generous paid parental leave
- Remote-friendly environment with flexibility
- Support for home office costs (phone & internet)
_Specific benefit details vary by country and are confirmed during the offer process._
#### **Why Join Us**
Built on over two decades of cybersecurity experience, our team of experts understands the intricacies of vulnerabilities, their exploitation in the wild, and how to leverage this data to build more effective cybersecurity products that produce better outcomes for organizations.
VulnCheck gives organizations a tactical advantage by providing best-in-class exploit & vulnerability intelligence information. We have a sense of duty to protect the critical infrastructure we rely on including medical devices, power grids and telecommunication networks. We were founded in 2021 in Lexington, Massachusetts.
VulnCheck has a transparent, collaborative, and supportive culture - we are looking for people who have a growth mindset, are curious and innovative. Our team is smart, but humble, hardworking, and supportive.
VulnCheck is proud to be an Equal Employer Opportunity employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. VulnCheck is committed to working with and providing reasonable accommodations to applicants with physical and mental disabilities. *Even if your experience doesn’t perfectly align with the job description, we encourage you to apply—we value potential just as much as a perfect resume.