Security Engineer

Allium

. Build and operate controls protecting Allium’s infrastructure, applications, employee systems, and AI use .

Posted 11/2/2026full-timeRemote • United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in implementing security controls across infrastructure and applications, with a strong foundation in identity management, cloud security, and vulnerability management. Capable of automating security processes and collaborating effectively with engineering teams to enhance security posture.

Highest-signal resume keywords

Cloud SecurityIdentity ManagementVulnerability ManagementAccess ControlSecurity Automation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Controls ImplementationThreat InvestigationCredential ManagementCI/CD WorkflowsNetwork ProtectionSecrets ScanningEndpoint ProtectionApplication SecurityVulnerability ManagementCloud Platform Experience

Soft Skills

Clear CommunicationPractical JudgmentConstructive Working Relationships

Tools & Technologies

APIsSecurity RunbooksMonitoring ToolsAudit TrailsDeveloper Tools

Industry Keywords

Infrastructure SecuritySupply-Chain RiskPhishing-Resistant AuthenticationPrivileged-Access ControlsCloud Configuration

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Build and operate controls protecting Allium’s infrastructure, applications, employee systems, and AI use
Work with Engineering and the security-program lead to investigate threats, implement practical fixes, and automate security work
Implement least privilege, phishing-resistant authentication, short-lived credentials, privileged-access controls, provisioning and deprovisioning
Improve cloud configuration, credential storage, network protections, and secrets scanning
Secure AI agents and developer tools through permissions, execution isolation, network restrictions, audit trails, and safeguards against prompt injection and tool misuse
Correlate identity, cloud, workload, and CI/CD telemetry to detect threats and investigate attacks
Reduce alert noise, test response procedures, revoke sessions, rotate exposed credentials, and remove unauthorized access
Assess software dependencies, CI/CD workflows, third-party integrations, and developer environments to reduce supply-chain risk
Monitor internet-facing services, evaluate vulnerabilities and active exploitation, and coordinate remediation
Automate access reviews, configuration checks, evidence collection, and remediation tracking using code and APIs
Deploy and maintain endpoint protections and device security baselines
Support identity and SaaS controls, audits, customer reviews, and security runbooks

Requirements

What you’ll need

Typically 4+ years of relevant security, infrastructure, or software engineering experience, with direct responsibility for implementing security controls
Hands-on experience with a major cloud platform
Strong foundation in identity, networking, operating systems, and access control
Depth in at least two areas such as cloud security, detection and response, application security, vulnerability management, or corporate security
Experience investigating technical problems from logs and system behavior, testing hypotheses, and following issues through resolution
Clear communication, practical judgment, and constructive working relationships with engineers and business teams
Must answer the application question: “What is an Allium? What is your favorite Allium?”
U.S. work eligibility and visa sponsorship status are requested in the application form

Benefits

Comp & perks

Medical, Dental, Vision, Life and AD&D insurance; US folks get 100% coverage for Gold plans and 80% for dependents
Meaningful early-stage equity; every full-time employee receives a stock option grant
Flexible, trust-based paid time off
Vacation policies meeting or exceeding local statutory requirements in every country hired
Company-sponsored 401(k) plan in the US
Remote work arrangement