Senior Security Engineer

Lumos

. Design and ship core security platform systems in the Lumos codebase, including request context propagation, scoped API tokens, authorization services, and decoupled authentication from synced identities.

Posted 10/27/2026full-timeRemote • United StatesSenior💰 $155,000 - $200,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and implementing security systems, including authentication and authorization frameworks, while effectively communicating security strategies and findings to stakeholders. Proficient in securing cloud infrastructure and managing vulnerabilities in production environments.

Highest-signal resume keywords

Security System DesignThreat ModelingAWS IAMPython ProgrammingClear Written Communication

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Application SecurityProduct SecurityPlatform SecurityToken ManagementSession ManagementSecrets ManagementAudit LoggingVulnerability AssessmentInfrastructure as CodeBackend Development

Soft Skills

CommunicationCollaborationLeadership

Tools & Technologies

OAuth 2.0OIDCSAMLSCIMOPAZanzibar-style ModelsCedarSOC 2ISO 27001

Industry Keywords

Security ArchitectureIncident ResponseCloud SecurityGrowth-Stage Startup Experience

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud PlatformPythonTypeScriptGo

About the role

Key responsibilities & impact

Design and ship core security platform systems in the Lumos codebase, including request context propagation, scoped API tokens, authorization services, and decoupled authentication from synced identities.
Lead multi-sprint security projects end to end and coordinate with engineers across teams.
Run security architecture reviews and threat models for new products, including the MCP Governance gateway and on-device policy checks.
Turn security findings into tracked, prioritized work.
Drive least-privilege access to production systems, databases, data pipelines, AWS IAM, and secrets.
Triage, route, and fix vulnerabilities from penetration tests, cloud assessments, and dependency scanning; coordinate retests.
Participate in security on-call and incident response.
Answer security questions from customers and prospects.
Build security foundations for Lumos's identity platform and advise customers on security.

Requirements

What you’ll need

5+ years of software engineering experience, with at least 3 focused on security (application, product, or platform security).
Track record of designing, shipping, and operating production security systems, including authentication and authorization frameworks, token and session management, secrets management, or audit logging.
Strong backend skills.
Python and TypeScript are a strong plus; Go is welcome.
Clear written communication.
Hands-on experience with threat modeling, secure design review, and finding and fixing vulnerabilities in a real codebase.
Experience securing cloud infrastructure on AWS, including IAM and Infrastructure as Code; equivalent GCP or Azure experience considered.
Nice to have: OAuth 2.0, OIDC, SAML, SCIM, OPA, Zanzibar-style models, Cedar, SOC 2, ISO 27001, IAM, and/or growth-stage startup experience.
Must be eligible to work in the United States or Canada; application asks whether sponsorship is required to work in Canada or the United States.

Benefits

Comp & perks

Remote-first culture – Work from anywhere within ±4 hours of Pacific Time.
Medical, dental & vision insurance – 100% of premiums covered for employees, 60% for dependents. HSA and FSA available with employer contribution. International benefits align with local standards.
Mental health support – Access to mental health resources and support.
Monthly wellness stipend – A monthly stipend for gym memberships, fitness apps, and whatever helps you recharge.
Life & disability insurance – Life insurance, short-term disability, and long-term disability coverage available.
Flexible PTO – Flexible time off with a minimum annual requirement.
Parental leave – Up to 16 weeks of paid parental leave for expecting parents.
$1,000 annual learning stipend – An annual budget for courses, books, conferences, and certifications.
Company & team offsites – Company and team bonding trips throughout the year, fully covered by Lumos.
401(k) with matching – Employer 401(k) matching.