Liftoff is hiring a senior security engineer focused on application security for GenAI, Creative GenAI, and emerging businesses. The role involves establishing secure software development standards, performing design and code reviews, threat modeling, triaging security issues, and building security tools and automation. Candidates must have 5+ years of experience in security or software engineering, strong knowledge of secure software design, application and API security, cloud and infrastructure security, and practical software engineering skills. The position is full-time, remote within the US and Canada (specific states approved), and includes on-call and incident-response duties. Salary ranges from $184,000 to $250,000 plus bonus depending on location. Benefits include competitive salaries, equity, medical coverage, wellness stipends, and other perks. Liftoff values a security-conscious engineering culture and offers opportunities to work on diverse security domains including product, vendor, corporate, and infrastructure security.
What you'll do
Establish secure software development standards and integrate security into engineering design and development
Similar jobs
More roles worth a look
Related opportunities based on specialty and working model so candidates can keep momentum.
Create self-service paths for engineering teams to build and deploy securely through documented review workflows, reusable tools, and secure design patterns
Perform design and code reviews, threat modeling, and security assessments for GenAI, Creative GenAI, and emerging businesses
Partner with stakeholders to build a culture of security-minded builders
Triage incoming security issues, prioritize vulnerabilities by risk, and work with engineering teams on remediation and verification
Assess vendors and AI tools for security controls and product features
Share on-call and incident-response rotation including occasional off-hours response
Conduct blameless post-incident reviews, document findings, and follow through on remediation
Build maintainable security tools and automation including AI-assisted code-security triage
Partner with Detection & Response to improve detection and response guidance
Contribute across application, cloud, and infrastructure security as priorities change
Requirements
5+ years of relevant experience in security engineering or software engineering
Excellent judgment in prioritizing security efforts using a risk-based approach
Experience partnering with cross-functional teams to deliver security improvements
Ability to write production-quality code for security tools and automation
Strong understanding of secure software design, application and API security, authentication and authorization, threat modeling, and code review
Experience assessing cloud and infrastructure security
Ability to quickly understand complex engineering systems and architecture
Practical software engineering habits: testing, observability, version control, peer code review, continuous integration, and blameless postmortems
Strong technical writing skills for design documents, proposals, runbooks, and post-incident reviews
Willingness to share on-call and incident-response responsibilities including occasional off-hours response
