Senior Security Engineer - US

Exploitation prevention is only as strong as the intelligence driving those efforts, and most of the industry is still running on intelligence that lacks exploit context. VulnCheck, The Exploit Intelligence Company, delivers structured exploit intelligence on what is actively weaponized in the wild, purpose-built for the data lakes, ETL pipelines, automation, and AI and LLM workflows your infrastructure already runs on, raising the capability of everything it powers.
Were hiring a Senior Security Engineer to work side-by-side with our engineering team, embedding security into how we build and ship — not bolting it on after the fact. Youll partner with engineers on design reviews, help harden the platform as it grows, and build the tooling and automation that lets security scale without slowing anyone down. Youll report to our VP of Information Security and have real autonomy to identify problems and build the solutions yourself and in collaboration with engineering.
In addition to use of vendor tools, youll be writing code and infrastructure that turns security and compliance work into repeatable, self-service processes for the business helping to automate and improve whats manual today, closing gaps in how we detect and respond to issues, and giving engineering the guardrails and feedback loops they need to move fast safely.
Partner with Engineering on Platform Security

Review and harden IaC across our cloud environments (EKS, Aurora, OpenSearch, S3, IAM)
Lead least-privilege IAM decomposition and drive adoption of stronger identity patterns across the platform
Support disaster recovery testing and resilience exercises alongside the infrastructure team
Improve and extend onboarding/offboarding automation, alert triage pipelines, and identity/access anomaly detection
5+ years in security engineering, with real depth in AWS security and Infrastructure-as-Code (Terraform/Terragrunt strongly preferred)
~ Firm working knowledge of Kubernetes/EKS security — RBAC, network policies, pod security standards, image scanning, and cluster hardening
~ Strong written communication — youll document your own work, since were a small, high-trust team
~ A track record of building tools or automation that solved a security problem at scale, not just running existing tools
~ Previous use of tools like Crowdstrike, Wiz, Security Hub
~ Experience with golang
~ Comfortable working directly with software engineers — in code reviews, design discussions, and incident response
~ Experience with Google Workspace as an identity/IdP source of truth
~ Generous, flexible time off
Retirement/pension plan contributions (e.g., local pension schemes elsewhere)
Comprehensive healthcare coverage
Remote-friendly environment with flexibility
Support for home office costs (phone & internet)
Built on over two decades of cybersecurity experience, our team of experts understands the intricacies of vulnerabilities, their exploitation in the wild, and how to leverage this data to build more effective cybersecurity products that produce better outcomes for organizations.
VulnCheck gives organizations a tactical advantage by providing best-in-class exploit & vulnerability intelligence information. We have a sense of duty to protect the critical infrastructure we rely on including medical devices, power grids and telecommunication networks. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. VulnCheck is committed to working with and providing reasonable accommodations to applicants with physical and mental disabilities. *