Tuum

Security Engineer

• Threat model new services with product engineers
• Review code and infrastructure-as-code
• Build tooling that automatically catches recurring security problems
• Harden the cloud environment, mainly AWS and some GCP, including IAM, network boundaries, secrets/key management, logging, Kubernetes workloads, and Okta identity engineering
• Own the vulnerability cycle end to end, including CI/CD security gates, scanning, remediation, and penetration testing
• Build and maintain detections on native cloud services and company code
• Own detection queries, functions, and runbooks
• Act as a first responder on security incidents
• Support the Head of Security on PCI DSS, SOC 2, and ISO 27001, including testing and recurring compliance activities
• Support the IT Lead with corporate-environment automation, complex investigations, and absence cover
• Help engineers adopt reusable security patterns and secure defaults
• Provide a standing slot for security questions
• Work directly with the Head of Security to secure Tuum’s banking platform, cloud infrastructure, CI/CD pipeline, and product code