Security Engineer

XBOW

. Design and implement security controls across cloud, infrastructure, and internal platforms .

Posted 9/17/2026full-timeRemote • United States, Canada, ArgentinaMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in security engineering and product security, with a strong focus on cloud security across AWS, Azure, and GCP. Proficient in vulnerability management, incident response, and automation to enhance security operations in fast-paced environments.

Highest-signal resume keywords

Cloud Security EngineeringVulnerability ManagementAppSec Tooling and ProcessesKubernetes SecurityIncident Response

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Controls DesignThreat ModelingSecure Design ReviewsVulnerability TriageSASTSCAIaC ScanningCloud Security PlatformsAutomation ScriptingIncident Investigation

Soft Skills

Proactive CommunicationDetail-OrientedCollaboration

Tools & Technologies

AWSAzureGCPCNAPPKubernetes

Certifications & Qualifications

OSCPOSCEAWS Security SpecialtyKubernetes Security Certifications

Industry Keywords

Cloud SecurityApplication SecuritySecurity OperationsRisk-Based PrioritizationStartup Security Scaling

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud PlatformKubernetesSDLC

About the role

Key responsibilities & impact

Design and implement security controls across cloud, infrastructure, and internal platforms
Partner with engineering to harden cloud architecture, IAM, and infrastructure
Own product security reviews for new features, services, and major architecture changes
Drive threat modeling and secure design decisions early in the SDLC
Operate and improve AppSec workflows (SAST, SCA, secrets scanning, IaC scanning)
Triage vulnerabilities across application, container, and cloud findings, and drive remediation with risk-based SLAs
Define and run the vulnerability management lifecycle: intake, prioritization, exception handling, validation, and reporting
Improve CNAPP coverage and finding quality across cloud accounts and workloads
Improve Kubernetes and container security posture
Monitor, investigate, and respond to security events and incidents
Build automation to improve security operations, access workflows, and incident response
Support wider teams by providing timezone coverage for the fully remote organization

Requirements

What you’ll need

5+ years of experience in security engineering, product security, cloud/platform security, or closely related roles
Strong hands-on experience securing cloud environments (AWS, Azure and GCP)
Comfortable owning technical security problems end-to-end in fast-moving environments
Hands-on experience with product/application security in engineering environments (secure design reviews, threat modeling, code-level risk discussions)
Experience operating AppSec tooling and processes at scale (SAST, SCA, secrets, IaC scanning)
Strong vulnerability triage and remediation management experience, including risk-based prioritization and SLAs
Experience with CNAPP (or equivalent cloud security platforms) and tuning findings for engineering actionability
Working knowledge of Kubernetes/container security in production systems
Ability to partner with developers and platform teams to ship secure defaults without blocking delivery
Comfortable writing scripts and automations to improve security reliability and scale
Experience in incident response, investigation, and post-incident hardening in cloud-native environments
Security-minded, detail-oriented, and a proactive communicator in remote-first teams
Multi-cloud experience beyond AWS (e.g., Azure/GCP/OCI) advantageous
Offensive security/pentesting background advantageous
Experience scaling security at a startup from early stage to audit-ready maturity advantageous
Relevant security certifications advantageous (e.g., OSCP, OSCE, AWS Security Specialty, Kubernetes security certs)

Benefits

Comp & perks

Meaningful stock options
Comprehensive benefits
401k plan
Opportunity to learn from and collaborate with top security and AI experts
Regular opportunities to meet in person
Support to travel to collaborate with colleagues in person