Security Engineer

Vibes

. Engineer, operate, and improve cloud security controls covering network, identity, logging, encryption, and configuration baselines .

Posted 11/5/2026full-timeChicago • Illinois • United StatesMid-LevelSenior💰 $110,000 - $120,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cloud security engineering, vulnerability management, and incident response, with a strong focus on IAM principles and automation of security workflows. Proficient in communicating security risks effectively to diverse audiences and ensuring compliance with industry standards.

Highest-signal resume keywords

Cloud Security EngineeringVulnerability ManagementIncident ResponseIAM PrinciplesAWS Security Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability ManagementIncident ResponseIAM PrinciplesInfrastructure As CodeSecurity AutomationSecurity ToolingRisk AssessmentCode ReviewAI Risk EvaluationScripting

Soft Skills

Strong CommunicationConstructive FeedbackCoaching

Tools & Technologies

AWSTerraformCloudFormationSIEMEDRCSPMVulnerability ScanningIdP ToolingLLM-Based ApplicationsAPIs

Certifications & Qualifications

CISSPAWS Security Certification

Industry Keywords

SOC 2ISO 27001NIST CSFCIS BenchmarksOWASPMITRE ATT&CK

Tech Stack

Tools & technologies

AWSCloudCyber SecurityPythonTerraformTypeScriptGo

About the role

Key responsibilities & impact

Engineer, operate, and improve cloud security controls covering network, identity, logging, encryption, and configuration baselines
Improve security tooling coverage and track and close coverage gaps
Define guardrails and secure defaults for engineering teams
Run vulnerability management end to end, including ingestion, triage, prioritization, assignment, and closure
Coordinate remediation timelines, unblock fixes, and handle exceptions
Report SLA performance, backlog age, and risk trends to security leadership
Tune detections, reduce noise, and respond to security events
Write, maintain, and rehearse incident response runbooks
Plan and run tabletop exercises and implement lessons learned
Participate in the security on-call rotation if applicable
Improve access granting, reviewing, and removal, including provisioning automation and periodic access reviews
Own security steps in joiner, mover, and leaver processes with GRC and IT Support
Apply least privilege, RBAC, and SSO across people, service accounts, and agent identities
Review code and infrastructure-as-code changes for security risk
Create reusable secure patterns, templates, and automated CI/CD checks
Coach engineers on security findings and remediation
Use language models and agents to strengthen workforce security
Secure AI-enabled software development processes, including controls for AI-generated code, agent permissions, and review gates
Assess security of AI tools and agents, including access scope, data handling, credential management, logging, prompt injection, and data exfiltration risks
Explain risk to engineers, executives, and auditors
Support SOC 2 and ISO 27001 audit and compliance evidence requests with GRC
Report to the Senior Security Engineer

Requirements

What you’ll need

3+ years of cybersecurity experience at a SaaS company, or equivalent
Hands-on security engineering experience in a cloud environment; AWS preferred
Comfort reading code and infrastructure as code (e.g., Terraform/CloudFormation; Python/Go/TypeScript), spotting security issues, and giving constructive review feedback
Practical experience with vulnerability management and incident response
Solid understanding of IAM principles: least privilege, RBAC, SSO, access reviews, and the joiner/mover/leaver lifecycle, as applied to people, service accounts, and agent identities
Working knowledge of where AI systems introduce risk and where they reduce work
Strong written and verbal communication, including the ability to explain a risk to any audience
Relevant certification, such as CISSP or an AWS security certification, preferred
Experience with SIEM, EDR, CSPM, vulnerability scanning, or IdP tooling preferred
Experience automating security workflows with scripting or APIs preferred
Hands-on experience evaluating or building LLM-based applications or agents preferred
Familiarity with NIST CSF, CIS Benchmarks, OWASP, or MITRE ATT&CK preferred
Experience running tabletop exercises or leading incidents preferred

Benefits

Comp & perks

Competitive salaries
Options
Medical coverage
Dental coverage
Vision coverage
Short-term disability
Long-term disability
Life insurance
11 paid holidays
Flexible vacation
Commuter benefits
401(k) plan and match
Paid parental leave program