Apply

Ready to go for it?

AI Apply speeds things up—apply directly if you prefer.

FREE ACCESS
5,000–10,000 jobs/day
Scoutfield Logo

See all jobs on Scoutfield

Search thousands of fresh jobs every day.

Discover
  • Fresh listings
  • Fast filters
  • No subscription required
Create a free account and start exploring right away.
Modular

Security Engineer

Modular

. Build and run secure development training, including role-based curricula for engineering teams .

Posted 11/12/2026full-timeRemote • United States, CanadaJuniorMid-Level💰 $180,000 - $270,000 per yearWebsite

Core Competencies

Role fit
Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in security engineering with a focus on cloud security across AWS, GCP, and Azure, while effectively communicating secure development practices and security risks to diverse audiences. Proficient in incident response, security detections, and maintaining compliance with frameworks like SOC 2.

Highest-signal resume keywords
Security EngineeringCloud Security (AWS, GCP, Azure)Incident ResponseSOC 2 ComplianceProgramming (Go, Python, Rust, C++)

ATS Keywords

Tailor your resume
Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills
Security EngineeringCloud SecurityIncident ResponseSecurity DetectionsRisk AssessmentProgramming (Go, Python, Rust, C++)Scripting (Bash)Threat ModelingVendor Risk ManagementSecure Development Practices
Soft Skills
Strong Written CommunicationStrong Verbal Communication
Tools & Technologies
WizGoogle SecOpsCrowdStrikeVeracodeSIEMCI/CD Security
Industry Keywords
SOC 2ISO 27001NISTSoftware Supply Chain SecuritySASTSCADASTSecurity AuditsPost-Incident ReviewsUser Access Reviews

Tech Stack

Tools & technologies
AWSAzureCloudGoogle Cloud PlatformPythonRustSDLCC++Go

About the role

Key responsibilities & impact
  • Build and run secure development training, including role-based curricula for engineering teams
  • Support SOC 2 2027 readiness and audits by maintaining controls and documentation, collecting evidence, and working with auditors
  • Conduct security reviews of vendors, software acquisitions, and integrations
  • Respond to customer security questionnaires
  • Build and tune SIEM detections and alerts, investigate alerts, and onboard new log sources
  • Strengthen cloud security across AWS, GCP, and Azure
  • Triage and prioritize Wiz findings and drive remediation with owning teams
  • Participate in the security on-call rotation, investigate incidents, coordinate containment and remediation, and write post-incident reviews
  • Participate in quarterly user access reviews and fleet-wide responses to newly disclosed vulnerabilities
  • Partner with Platform, SDLC, and IT engineers to align security, identity, and endpoint controls

Requirements

What you’ll need
  • 4+ years of experience in security engineering, application security, or software or infrastructure engineering with a security focus
  • Experience securing cloud workloads and assessing security risks in AWS, GCP, or Azure
  • Experience working with security detections and alerts, including investigating and tuning them
  • Familiarity with SOC 2 or a similar framework (ISO 27001, NIST), including producing audit evidence
  • Experience with incident response, threat modeling, and risk assessment in fast-moving engineering environments
  • Ability to communicate secure development practices to engineers and explain security risks to technical and non-technical audiences
  • Proficiency in at least one of Go, Python, Rust, or C++, and in a scripting language such as Bash
  • Strong written and verbal communication
  • Bachelor's degree in Engineering, Information Systems, Computer Engineering, Electrical Engineering, Computer Science, or related field and 4+ years of Software Engineering or related work experience; OR Master's degree and 3+ years; OR PhD and 2+ years
  • 2+ years of work experience with a programming language such as Python, Mojo, Rust, C++, etc.
  • Helpful but not required: experience with Wiz, Google SecOps, CrowdStrike, Veracode, secure development training, vendor or third-party risk management, customer security reviews, SAST, SCA, DAST, software supply chain security, CI/CD security, large monorepos, Bazel builds, merger or acquisition security integration, or AI and LLM tooling

Benefits

Comp & perks
  • Comprehensive healthcare coverage
  • Retirement and savings programs
  • Employee stock purchase opportunities
  • Paid time off
  • Wellbeing resources
  • Family support programs
  • Learning and development opportunities
  • RSU grants
  • Regular team onsites and local meetups
  • Travel to team building events 2–4 times a year