Senior Security Engineer

Responsibilities

• Assess and improve Later’s security posture across applications, infrastructure, cloud environments, corporate systems, vendor tooling, and business workflows.
• Build and maintain internal security tools, automation, and services for secure development, compliance, vulnerability management, corporate security operations, and visibility.
• Implement security controls in CI/CD pipelines, including security scanning, dependency management, container scanning, and secret management.
• Support application security through secure design reviews, threat modeling, code review guidance, API security, microservices security patterns, and remediation planning.
• Improve cloud and corporate systems security through hardening, monitoring, configuration reviews, access reviews, Infrastructure-as-Code security scanning, and secure operational patterns.
• Strengthen logging, alerting, detection engineering, incident response, and security process maturity.
• Partner with technical and business teams to communicate risks, prioritize remediation, and embed practical security guidance.
• Support SOC 2 and related compliance efforts through automated controls, evidence collection, and cross-functional coordination.

Requirements

• 5–7+ years of experience as a Security Engineer or Software Engineer with a strong security focus.
• Proven ability to build and operate production-quality software, automation, and internal tooling.
• Strong understanding of application security, infrastructure security, cloud security, secure CI/CD practices, and corporate security controls.
• Hands-on experience with vulnerability management, secure software development, threat modeling, remediation workflows, and operational security improvements.
• Experience with OWASP, NIST, CIS Controls, SOC 2, and ISO 27001, including practical SOC 2 compliance support.
• Familiarity with AWS Security Hub, Azure Security Center, or GCP Security Command Center.
• Experience with SIEM/SOAR tools, logging and monitoring platforms, detection workflows, and incident response processes.
• Experience with Infrastructure-as-Code security scanning for Terraform or CloudFormation.
• Ability to explain complex security concepts clearly to technical and non-technical audiences and collaborate with engineering, IT, compliance, and business teams.
• Familiarity with C#, modern backend systems, cloud-native architecture, and SaaS business tooling.

Benefits

• Permanent team members are eligible for various benefits plans.
• The role may be based in Boston, MA; Vancouver, BC; or Vancouver, WA, and select positions may be fully remote.
• The company provides an inclusion-first workplace and is an equal opportunity employer with accessibility support available during recruitment.