Staff Security Engineer (Product Security and Architecture)
Confirmed on the employer's own hiring board on Oct 19, 2026. First seen by Alion on Jul 25, 2026. Compass scores B on the Alion truth index.
Join our Security organization as a Staff Security Engineer, where you will drive technical security results, automate application security, and advocate for secure-by-design approaches. You will collaborate with engineering teams, serve as a trusted security advisor, and stay ahead of industry trends. This role requires a minimum of three years of experience in relevant areas, a bachelor's degree in computer science or a related field, and hands-on experience with AWS services and Infrastructure as Code tools.
Missions
- Automate and scale application security by building and enhancing automated application security testing frameworks and tooling.
- Drive secure-by-design architectures by partnering closely with engineering teams to evaluate solution architectures and codebases.
- Serve as a trusted security advisor by acting as a key resource and subject matter expert for product and engineering teams, offering security guidance and risk evaluations.
Profil recherché
- Self-Driven Achiever: You are highly self-motivated, with the organizational and time-management skills required to manage multiple complex initiatives simultaneously- Analytical Problem Solver: You possess exceptional troubleshooting skills and the logical capacity to diagnose complex architectural and pipeline security challenges
- Strategic Collaborator: You thrive in Agile and DevOps environments, viewing security as an enabler of engineering velocity rather than a bottleneck
- Technical Leader & Advocate: You are passionate about mentoring others and can articulately champion security concepts to both deeply technical engineers and business stakeholders
- Administering and configuring automated pipeline tools (CI/CD)
- Participating in security-focused reviews for both vendor and custom business solutions
- Automation scripting using Python or Bash
- Product development using Python, JavaScript, TypeScript, Golang, or Java
- Performing security code reviews for solutions built in Python, JavaScript, TypeScript, Golang, or Java
- Minimum of three (3) years of experience across the following areas:
- Practical experience working with AWS services, aligning both product solution delivery and security objectives
- Bachelor’s degree in Computer Science, a related technical field, or equivalent practical work experience
- Hands-on experience with Infrastructure as Code (IaC) tools (e.g., Terraform) to provision secure, reproducible infrastructure
- Hands-on experience using Artificial Intelligence (AI) to assist with product security processes to drive team and operational efficiencies
- Administering and tuning application security testing tools (e.g., SAST, DAST, or SCA)
- Relevant industry certifications (e.g., CEH, CISSP, CSSLP, GIAC, or cloud security certifications) are a strong plus
- Direct experience working within high-performing DevOps and Agile cultures
- Experience with Layer 7 security controls (e.g., Web Application Firewalls (WAF), API Gateways, OAuth2/OIDC implementation, and rate limiting)
- Experience driving secure-by-design practices across multi-cloud strategies (e.g., AWS, Azure, GCP)
- Experience reviewing and assessing the use of AI technologies within both vendor-provided and custom-developed business solutions
- Experience operating in a publicly traded company, including familiarity with SOX-adjacent control environments and audit processes
- Experience securing environments through a merger, acquisition, or major infrastructure consolidation