Lead Security Engineer (Remote - US)

This position is posted by Jobgether on behalf of a partner company. We are currently looking for a Lead Security Engineer in the United States.

As a Lead Security Engineer, you will play a key role in strengthening the organization’s cybersecurity posture and ensuring a secure experience for users across platforms. You will oversee the design and implementation of advanced security frameworks, tools, and practices, working closely with product and engineering teams to mitigate risk and embed security throughout the software lifecycle. This position offers the opportunity to influence security strategy, drive technical excellence, and lead complex security initiatives from concept to execution. Ideal candidates are passionate about proactive defense, automation, and continuous improvement, thriving in environments that value innovation and collaboration.

Accountabilities

• Lead and mature security initiatives to ensure protection from design through implementation.
• Conduct threat modeling to guide product and application design decisions.
• Perform in-depth code reviews to detect vulnerabilities and ensure compliance with best practices.
• Identify and triage application vulnerabilities while proposing effective remediation strategies.
• Conduct purple team exercises to simulate and counter attack vectors.
• Develop and optimize automated security processes, tools, and monitoring systems.
• Implement frameworks for severity levels, SLAs, and remediation workflows.
• Collaborate with cross-functional teams to integrate security principles into engineering workflows.

Requirements

• Proven experience leading and implementing successful application security programs.
• Strong background in partnering with cross-functional engineering and product teams.
• Expertise in designing remediation strategies and mitigating security vulnerabilities.
• Deep understanding of DevSecOps, AppSec, and modern cloud environments.
• Experience with AWS, Kubernetes, CI/CD pipelines, Terraform, and CloudFormation.
• Familiarity with security and compliance standards such as SOC2, PCI, HIPAA, HITRUST, and NIST.
• Experience protecting sensitive data, particularly in healthcare or regulated industries.
• Knowledge of securing Ruby on Rails, JavaScript, and GraphQL applications.
• Hands-on experience with penetration testing tools such as Burp Suite.
• Strong analytical mindset, problem-solving ability, and attention to detail.

Benefits

• Competitive salary with generous paid time off.
• Comprehensive health, dental, and vision coverage.
• RRSP/401(k) match program for financial well-being.
• Flexible benefits package and wellness initiatives.
• Dedicated training budget and company-wide learning programs.
• Discounts on partner products and services.
• Fully remote work flexibility within the U.S.

Jobgether is a Talent Matching Platform that partners with companies worldwide to efficiently connect top talent with the right opportunities through AI-driven job matching.

When you apply, your profile goes through our AI-powered screening process designed to identify top talent efficiently and fairly.
🔍 Our AI evaluates your CV and LinkedIn profile thoroughly, analyzing your skills, experience, and achievements.
📊 It compares your profile to the job’s core requirements and past success factors to determine your match score.
🎯 Based on this analysis, we automatically shortlist the three candidates with the highest match to the role.
🧠 When necessary, our human team may perform an additional manual review to ensure no strong profile is missed.

The process is transparent, skills-based, and free of bias, focusing solely on your fit for the role. Once the shortlist is completed, we share it directly with the company that owns the job opening. The final decision and next steps (such as interviews or additional assessments) are then made by their internal hiring team.

Thank you for your interest!

#LI-CL1