{"id":219,"url":"https://alion.io/job/authlete-senior-security-engineer","title":"Senior Security Engineer","company":{"id":325,"name":"Authlete","domain":"authlete.com","url":"https://alion.io/company/authlete","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"BambooHR","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Java","optional":false},{"name":"Kubernetes","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false}],"status":"live","first_seen_at":"2025-06-30T00:00:00Z","employer_posted_date":"2025-06-30","last_verified_at":"2026-10-17T00:03:28Z","board_verified":true,"closed_at":null,"days_open":474,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":473},"description":"We’re a ~40 person company building the OAuth/OpenID Connect platform that large digital banks and regulated industries run their identity on. Our stack is Java on Google Cloud, delivered as a shared multi-tenant service, dedicated single-tenant clusters, and a self-managed product customers run themselves.\nThis is a hands-on builder role, not a management or pure-compliance role. You’ll build our security program from the ground up: writing the policies, shipping code fixes, wiring detection into GCP, and setting the practices the rest of engineering follows. You’ll lean on AI to move fast, researching how the best companies do this, drafting policies, reviewing code, and hunting vulnerabilities at a scale a lean team otherwise couldn’t reach.\nWhat you'll do\nStand up our vulnerability management program end to end: intake, triage, severity, remediation targets, security advisories, and coordinated disclosure, across both our managed and self-managed deployment models.\nBuild our product security incident response (PSIRT): on-call, playbooks, and AI-assisted triage that turns High/Critical CVEs into paged incidents automatically.\nWork hands-on in the codebase, contributing security fixes to our Java platform and raising the bar on secure coding, secrets and key management, and hardening.\nBuild proactive detection and response in GCP: alerts, monitoring, and automation where it pays off.\nIntegrate security into CI/CD and IaC: dependency and container scanning, Terraform checks.\nOwn our external security posture: security.txt, a security contact, a public trust page, and a security white paper.\nGet ahead of frontier-AI offensive tooling (the Mythos class of AI-discovered zero-days) by pointing AI agents at our own code before someone else does.\nPartner with platform engineers on security-relevant architecture and lead its security dimension.\nSupport ISO 27001 and SOC 2 controls pragmatically alongside engineering, without the role becoming audit admin.\nWhat we're looking for\nA hands-on security engineer who codes. You’re comfortable reading and writing code (Java, Go a strong plus), Terraform, and GCP configs, not just reviewing others’ work.\nStrong application security foundation: secure coding, vulnerability management, security in CI/CD.\nCloud security depth on GCP, IAM, Kubernetes, infrastructure hardening.\nIncident response experience: investigations, detection tooling, and clear communication with customers or regulators.\nYou’re energized by owning the whole spectrum at a small company rather than going narrow at a large one.\nBonus: OAuth/OIDC, FAPI, or identity-security background; ISO 27001 or SOC 2 exposure.\nWhy Join Us\nOwn security for a platform used by large financial and regulated customers\nWork closely with founders, engineering, and customers\nModern, cloud-native environment without unnecessary overhead\nCompetitive pay and flexibility","description_format":"text","description_chars":2898,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Identity Management","Developer Tools"],"lifecycle":[{"event":"open","at":"2025-06-30T00:00:00Z"}],"visa":[],"liveness":{"score":7,"band":"cold","label":"Long shot","p_open":1,"p_active":0.243,"p_room":0.28,"age_days":473,"expected_fill_days":31,"reasons":["conf:3","win:tail","crowd:"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/authlete-senior-security-engineer","json_url":"https://alion.io/job/authlete-senior-security-engineer.json","meta":{"generated_at":"2026-10-17T01:16:13Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1812,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":325},"rest":"https://alion.io/mcp/rest/get_company?id=325"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fauthlete-senior-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fauthlete-senior-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fauthlete-senior-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/authlete-senior-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fauthlete-senior-security-engineer"}]}