Security Engineer

Responsibilities

• Design and implement security controls across AWS infrastructure and the application layer
• Build security tooling and automation to detect, prevent, and respond to threats at scale
• Conduct security reviews of architecture designs, code, and infrastructure changes
• Lead vulnerability management and coordinate bug bounty responses
• Develop security monitoring, alerting, and incident response capabilities
• Partner with engineering teams on secure coding practices and threat modeling
• Deploy AI-assisted vulnerability scanning across codebase and infrastructure
• Build automated triage workflows using AI to deduplicate findings and estimate exposure
• Drive adoption of memory-safe languages and secure-by-design practices

Requirements

• 5+ years of software engineering experience
• 2–3 years focused on security engineering or application security
• Hands-on experience securing AWS environments (IAM, VPC, CloudTrail, GuardDuty)
• Proficiency in Python, TypeScript/Node.js, or Go
• Deep understanding of web application security and OWASP Top 10
• Experience with CI/CD pipelines and Infrastructure-as-Code (Terraform, CloudFormation)
• Background in penetration testing, offensive security, and SIEM/log analysis

Preferred Qualifications

• Experience at a high-growth SaaS startup
• Familiarity with AI/ML security tooling and frontier models for code scanning
• Experience building zero trust architecture or identity-aware access controls
• Knowledge of supply chain security frameworks (SLSA, OpenSSF, SBOM)

About the Company

Gamma is building security posture for the age of AI-driven offense and defense, leveraging frontier models to protect infrastructure at scale.