FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates extensive experience in Security Engineering, with a focus on application, cloud, and infrastructure security. Proficient in managing security teams, implementing secure software development lifecycle practices, and conducting audits in compliance with PCI DSS, SOC 2, and ISO 27001.
Highest-signal resume keywords
Security Engineering ManagementSecure Software Development Lifecycle (SDLC)Application Security, Cloud Security (AWS), Infrastructure SecurityPCI DSS, SOC 2, ISO 27001 AuditsProgramming Languages: Java, Golang, Python
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Security EngineeringSecure SDLCThreat ModelsCode ScansDependency ScansSecurity Checks in CI/CDApplication SecurityCloud SecurityInfrastructure SecuritySecurity Automation
Soft Skills
Influencing Without AuthorityClear Communication
Tools & Technologies
Security Engineering ToolsAPI-Driven PlatformsMulti-Region SaaS Platforms
Industry Keywords
Travel TechnologyPaymentsArtificial IntelligenceMachine LearningGRC
Tech Stack
Tools & technologiesAWSCloudJavaPythonSDLCGo
About the role
Key responsibilities & impact- Lead the Security Engineering team within Spotnana's global Security organization
- Run Security Engineering for Spotnana's travel platform and corporate systems
- Build a team of security engineers and make security part of how Spotnana builds software
- Hire, develop, and manage security engineers across application, cloud, and infrastructure security
- Own the Security Engineering plan for the current and next quarter
- Own the secure software development lifecycle program and standards across Engineering teams
- Run security design reviews for new features, partner APIs, payment flows, and AI features
- Set fix priorities for security findings and escalate overdue critical findings
- Align security priorities with business and development teams and keep them on the roadmap
- Own SDLC, change management, and cloud configuration controls in PCI DSS, SOC 2, and ISO 27001 audits with the GRC team
- Manage the annual external penetration test and Security Engineering tool vendor relationships
- Allocate team time across projects, design reviews, and findings
- Propose headcount, tool, and vendor spending in the annual budget
- Report team metrics, including open findings by severity and review cycle time, to Security leadership
- Report to the Head of Security & IT
Requirements
What you’ll need- 10+ years of security engineering experience
- 3+ years as a manager of security engineers
- Record of hiring, developing, and managing the performance of security engineers
- Deep expertise in at least one of application security, cloud security (AWS), or infrastructure security, with working knowledge of the others
- Experience with a secure SDLC program, including threat models, code and dependency scans, and security checks in CI/CD pipelines
- Ability to influence without authority and communicate clearly to engineers, executives, and auditors
- Experience with PCI DSS, SOC 2, or ISO 27001 audits
- Fluency in at least one programming language, with ability to review code and build security automation
- Java, Golang, and Python are a strong plus
- Experience with an API-driven, multi-region SaaS platform is a plus
- Familiarity with security risks of Artificial Intelligence and Machine Learning features is a plus
- Experience in travel technology or payments is a plus
- Candidates must be legally authorized to work in the United States
- Must not require current or future employment sponsorship
- Ability to participate in virtual interviews, face-to-face conversations, and coding exercises
Benefits
Comp & perks- Equity in the form of stock options, which provides partial ownership in the company
- Pre-tax and ROTH 401(k) options via Fidelity with up to a 4% company match
- Comprehensive benefit plans covering medical, dental, vision, life, and disability effective on your hire date
- 100% coverage of employee premiums and 85% coverage of eligible dependents
- Pre-tax flexible spending account options for health, dependent care, and commuter expenses
- Flexible PTO
- 10 company holidays
- End-of-year company shutdown
- Up to 26 weeks of Parental Leave
- Monthly cell phone/internet stipend
- IATAN travel membership
- Pet insurance
- Financial wellness tools
- Calm app access
- Annual performance bonus
- Comprehensive benefits
