Security Engineer
XBOW · Remote · US remote · Canada remote · Remote Argentina ·
COMPENSATION
€•• – ••k
Listed on the employer's job board (Ashby)
- Fully remote (US/CA/AR)
- 5+ years experience
- Cloud & AppSec focus
- Kubernetes security
- Full-time position
Join XBOW as a hands-on Security Engineer focused on integrating security into design, shipping, and operations. You will partner with engineering teams to harden cloud architecture, manage vulnerabilities, and enhance detection and response capabilities across the platform.
What you'll do
- Design and implement security controls for cloud and infrastructure
- Harden cloud architecture, IAM, and infrastructure with engineering teams
- Conduct product security reviews for new features and architecture changes
- Drive threat modeling and secure design decisions in the SDLC
- Operate AppSec workflows including SAST, SCA, and secrets scanning
- Triage vulnerabilities and drive remediation based on risk SLAs
- Manage the vulnerability lifecycle from intake to reporting
- Improve CNAPP coverage and Kubernetes security posture
- Monitor, investigate, and respond to security incidents
- Build automation for security operations and access workflows
What you'll need
- 5+ years in security engineering or related roles
- Hands-on experience securing AWS, Azure, or GCP environments
- Experience with product security, threat modeling, and code reviews
- Proficiency with AppSec tooling like SAST, SCA, and IaC scanning
- Strong skills in vulnerability triage and risk-based prioritization
- Experience with CNAPP platforms and tuning findings
- Working knowledge of Kubernetes and container security
- Ability to write scripts and automate security tasks
- Experience in incident response and post-incident hardening
- Proactive communicator comfortable in remote-first teams
Nice to have
- Multi-cloud experience beyond AWS
- Offensive security or pentesting background
- Experience scaling security at early-stage startups
- Relevant certifications like OSCP or AWS Security Specialty
Stack
- AWS
- Azure
- GCP
- Kubernetes
- SAST
- SCA
- CNAPP
How you'll work
- Fully remote organization
- Location: US, Canada, or Argentina
- Regular in-person collaboration opportunities
- Full-time contract
What you get
- Competitive salary and meaningful stock options
- Comprehensive benefits and 401k plan
- Collaboration with top security and AI experts
- Support for travel to meet colleagues
Hiring process
- 30-min introductory chat with Talent Partner
- 30 minutes with Hiring Manager
- 1 hour technical deep dive
- 30 minutes with Deputy CISO
- 30-min final meeting with CISO