Senior Security Engineer

RevolutionParts

. Run AI-assisted scanning of code, infrastructure, and cloud configuration; triage results into ranked findings .

Posted 11/9/2026full-timeTempe • Arizona • United StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cloud security engineering, including AWS infrastructure management, application security testing, and incident response. Proficient in scripting and automation, with a strong focus on vulnerability management and compliance with security standards such as SOC 2 and ISO 27001.

Highest-signal resume keywords

AWS Cloud Infrastructure ManagementApplication Security TestingIncident Response LeadershipSecurity Certifications (CISSP, CISM, Security+)Vulnerability Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

PentestingEthical HackingInfrastructure As Code (Terraform)Scripting (Python, Bash)Security RemediationSIEM ManagementEDR ManagementAccess ReviewsAI-Assisted ScanningPolicy-As-Code

Soft Skills

Excellent Written CommunicationTeaching AbilityIndependent Working StyleStrong Follow-ThroughWillingness To Learn

Tools & Technologies

AWSKubernetesGitHubSIEMEDRWAFTLSDNSCI/CDBug Bounty Programs

Certifications & Qualifications

CISSPCISMSecurity+

Industry Keywords

SOC 2ISO 27001PCI DSSECommerceHigh-Traffic SaaS

Tech Stack

Tools & technologies

AWSCloudDNSKubernetesPythonTerraform

About the role

Key responsibilities & impact

Run AI-assisted scanning of code, infrastructure, and cloud configuration; triage results into ranked findings
Conduct application pentesting and ethical hacking focused on business logic flaws in checkout, account, and payment flows
Run quarterly access reviews and maintain consistent SSO and MFA across managed SaaS tools
Review AWS, Kubernetes, and infrastructure-as-code configurations for identity, encryption, secrets, and network weaknesses
Own pentest and bug bounty programs, including scoping, triage, ownership, severity deadlines, and fix verification
Set edge security policies for WAF, bot management, TLS, DNS, and certificates
Monitor AWS security signals, SIEM, and EDR; maintain endpoint coverage and lead security incident response
Improve SIEM data sources, detections, tuning, and reporting
Own code security in GitHub and code analysis tools, including dependency alerts, code and secret scanning, pull-request quality gates, branch protection, and repository access
Design and run tabletop exercises with infrastructure teams
Coordinate response to widely exploited vulnerabilities, drive patching, and document risk acceptance
Manage SOC 2, ISO 27001, PCI DSS, security questionnaires, partner assessments, PCI ASV scans, and Trust Center work
Define safe AI-use practices, including data restrictions, prompt-injection risks, and review of AI-generated security suggestions
Establish PII-handling best practices and route them to system owners
Build preventive guardrails using policy-as-code, organization controls, CI/CD, and GitHub security checks
Mature detection and incident readiness through runbooks and response playbooks
Defend against AI-accelerated attacks and improve vulnerability-to-fix timelines
Evaluate security tools and automate recurring scans, ticket creation, and reporting
Guide engineering teams through remediation without taking over their stack; write scripts, automation, detections, and security tooling
Coordinate stakeholders and follow findings through verified closure
Provide leadership with plain-language security risk and trend reporting and mentor engineering teams

Requirements

What you’ll need

5+ years in cloud, infrastructure, application, or security engineering, with recent years focused on security
Strong working knowledge of AWS cloud infrastructure, including IAM, encryption, logging, network controls, and native security services
Ability to read Terraform infrastructure as code and identify security misconfigurations
Comfortable scripting in Python, Bash, or similar
Track record of driving security remediation across teams to verified closure
Experience in SOC 2, ISO 27001, or PCI DSS environments at an eCommerce company or high-traffic SaaS platform
Experience with access reviews, audit evidence, questionnaires, third-party assessments, and auditors
Experience with vulnerability management and incident response
Application security testing experience, including pentesting or ethical hacking, especially business logic flaws in web applications; strongly preferred
Hands-on use of AI in security work, including AI-assisted scanning, triage, or code review
Security certifications such as CISSP, CISM, Security+, or equivalent; strongly preferred
Excellent written communication skills
Hands-on experience running a SIEM and EDR, building and tuning detections, investigating alerts, and leading incident response
Strong follow-through, clear writing, teaching ability, independent working style, daily AI tool use, and willingness to learn and unlearn
Hybrid role requiring work from the Tempe, Arizona offices at least 2 days per week

Benefits

Comp & perks

Competitive compensation
Career development
Benefits
401K match
Parental leave
Many more valuable perks
Hybrid work arrangement