{"id":2117029,"url":"https://alion.io/job/guidewire-senior-security-engineer","title":"Senior Security Engineer","company":{"id":6488,"name":"Guidewire","domain":"guidewire.com","url":"https://alion.io/company/guidewire","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":75,"open_postings":7,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-12T06:55:09Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":133000,"max":199000,"currency":"USD","period":"year","gross":null,"usd_annual":199000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"DNS","optional":false},{"name":"GCP","optional":false},{"name":"Human-in-the-Loop","optional":false},{"name":"Kubernetes","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"Platform Engineering","optional":false},{"name":"SRE","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Amazon EKS","optional":true},{"name":"CloudFormation","optional":true},{"name":"GitHub Actions","optional":true},{"name":"LLM","optional":true},{"name":"NIST AI RMF","optional":true},{"name":"OWASP","optional":true},{"name":"Python","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-10-08T23:30:25Z","employer_posted_date":"2026-10-08","last_verified_at":"2026-10-12T10:27:36Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"Summary\nGuidewire is seeking a Senior Security Engineer to design, build, operate, and improve secure infrastructure and cloud security capabilities across an AWS-first, multi-cloud environment.The core focus of this role is AWS cloud infrastructure and CI/CD supply chain security, while also partnering across teams to address emerging security frontiers-including securing AI systems (LLMs, AI agents, and Model Context Protocol integrations) and leveraging modern AI models and technologies to enhance and automate our security capabilities.\nThis role partners with functions across infrastructure and platform engineering, site reliability engineering and operations, product and application engineering, data and analytics, security, and other technology and business functions. The engineer translates security risks into scalable controls, automation, secure-by-default patterns, standards, and operating processes.\nThe role is expected to independently own complex work, solve ambiguous security problems, influence stakeholders, and mentor other engineers.\nJob Description\nResponsibilities:\nLead complex infrastructure security initiatives involving multiple teams, systems, and dependencies, with a primary focus on AWS cloud environments and CI/CD pipelines.\n\nDesign, implement, and operate security controls across AWS and applicable cloud platforms.\n\nBuild secure-by-default solutions using infrastructure as code, policy as code, CI/CD, and automation.\n\nImprove cloud governance, security posture, and operational resilience through controls for cloud organization and account structure, access management integration, policy enforcement, logging and monitoring, data protection, configuration management, network security, and account lifecycle management.\n\nDefine and maintain security baselines for cloud accounts, operating systems, containers, AMIs, Kubernetes, networks, and supporting infrastructure.\n\nSupport cloud account onboarding, offboarding, inventory, configuration drift management, exception handling, and control validation.\n\nDesign and improve cloud and infrastructure network security, including network segmentation, traffic visibility, ingress and egress control, DNS, firewalls, routing, private connectivity, and related monitoring and enforcement mechanisms.\n\nSecure CI/CD and software supply chains, including build and deployment workflows, dependencies, artifacts, containers, registries, third-party actions, secrets, and runner environments.\n\nSupport asset and identity governance for applications, infrastructure, containers, service accounts, workload identities, API keys, AI agents, and MCP tools.\n\nParticipate in AI security initiatives involving next-generation AI models, agents, and tool integrations (including Model Context Protocol / MCP), driving threat modeling, prompt injection defenses, data egress protection, guardrails, human-in-the-loop controls, monitoring, and leveraging AI models to automate and enhance security operations.\n\nApply risk-based security analysis using reachability, attack paths, asset criticality, exploitability, and business impact-not severity alone.\n\nValidate scanning-tool and AI-generated findings, establish ownership and remediation expectations, and improve finding quality feedback loops.\n\nRepresent Security in architecture, change management, design review, and operational forums.\n\nCommunicate risks, trade-offs, assumptions, dependencies, and business impact to technical and non-technical audiences.\n\nCreate standards, runbooks, architecture decision records, dashboards, documentation, and enablement materials.\n\nMentor engineers and help partner teams adopt secure patterns without requiring direct management responsibility.\n\nParticipate in on-call rotations and incident response support for cloud and infrastructure security incidents.\n\nMonitor emerging threats and translate relevant developments into practical improvements to Guidewire’s security controls.\n\nRequired Qualifications:\nTypically 5+ years of experience in security engineering, cloud security, infrastructure security, DevSecOps, or equivalent practical experience.\n\nHands-on experience designing and operating secure AWS environments is required. Experience with Google Cloud Platform (GCP) is strongly preferred; experience with other cloud platforms is a plus.\n\nExperience designing or operating cloud security capabilities, including cloud governance, access management integration, policy enforcement, logging and monitoring, data protection, network security, configuration management, and cloud account lifecycle controls.\n\nHands-on experience authoring, reviewing, testing, and troubleshooting infrastructure-as-code using Terraform, CloudFormation, or comparable technologies to deploy and manage security controls.\n\nHands-on experience building, securing, testing, and operating CI/CD pipelines, preferably using GitHub Actions or comparable platforms, including pipeline automation, secrets management, artifact handling, and runner security.\n\nHands-on scripting or programming experience, using Python, Go, or another appropriate language, to automate security tasks, integrate controls, and troubleshoot security tooling.\n\nPractical knowledge of cloud and infrastructure networking, including segmentation, routing, DNS, firewalls, ingress and egress controls, private connectivity, and network telemetry.\n\nExperience securing containers and Kubernetes platforms, preferably EKS or an equivalent platform.\n\nKnowledge of threat modeling, secure design, vulnerability management, security testing, risk assessment, monitoring, and incident response.\n\nAbility to evaluate security-control effectiveness using evidence, operational feedback, exceptions, findings, and relevant metrics.\n\nDemonstrated experience building, operating, or contributing to security measurement and analysis capabilities, such as asset inventories, control-coverage reporting, configuration-drift analysis, attack-path analysis, or security data platforms.\n\nWorking knowledge of identity and access-control concepts, including authentication, authorization, privileged access management, identity governance, zero-standing privilege, workload and non-human identities, and secrets management, with the ability to apply these concepts when evaluating, designing, implementing, or measuring controls across cloud, infrastructure, CI/CD, and operational workflows.\n\nWorking knowledge of software supply-chain security concepts, including SBOMs, artifact signing, provenance, dependency management, secure registries, and CI/CD runner hardening, with the ability to evaluate, design, implement, or measure related controls and automation.\n\nWorking knowledge of foundational AI security concepts (e.g., LLM risks, prompt safety) and an eagerness to apply AI capabilities to security automation.\n\nAbility to own complex work, manage ambiguity, make trade-offs, identify risks, and deliver outcomes across multiple teams.\n\nStrong written and verbal communication skills, including the ability to explain complex security concepts in business terms.\n\nPreferred Qualifications:\nHands-on experience or deep knowledge of AI-security risks and controls, including LLMs, AI agents, MCP, AI gateways, prompt injection defense, sensitive-data leakage, and applying advanced AI models/tools to improve security operations.\n\nFamiliarity with NIST AI RMF, OWASP LLM Top 10, MITRE ATLAS, ISO/IEC 42001, or comparable frameworks.\n\nRelevant certifications such as AWS Security Specialty, CISSP, GIAC, or equivalent practical expertise.\n\nThe US base salary range for this full-time position is $133,000 - $199,000. Your base pay will depend on your experience, skills, education, training, and location among other factors. All full-time positions or part-time roles working 30 hours or more a week at Guidewire are eligible for benefits that support their health and well-being including health, dental, and vision insurance, paid time off, and a company sponsored retirement plan. In addition, some roles may be eligible for the annual company bonus plan, commissions, and/or long term incentive awards which are contingent on a variety of factors including, but not limited to, company and employee performance.\n\nAbout Guidewire\nGuidewire is the platform P&C insurers trust to engage, innovate, and grow efficiently. We combine digital, core, analytics, and AI to deliver our platform as a cloud service. More than 540+ insurers in 40 countries, from new ventures to the largest and most complex in the world, run on Guidewire.\nAs a partner to our customers, we continually evolve to enable their success. We are proud of our unparalleled implementation track record with 1600+ successful projects, supported by the largest R&D team and partner ecosystem in the industry. Our Marketplace provides hundreds of applications that accelerate integration, localization, and innovation.\nFor more information, please visit www.guidewire.com and follow us on Twitter: @Guidewire_PandC.\nGuidewire Software, Inc. is proud to be an equal opportunity and affirmative action employer. We are committed to an inclusive workplace, and believe that a diversity of perspectives, abilities, and cultures is a key to our success. Qualified applicants will receive consideration without regard to race, color, ancestry, religion, sex, national origin, citizenship, marital status, age, sexual orientation, gender identity, gender expression, veteran status, or disability. All offers are contingent upon passing a criminal history and other background checks where it's applicable to the position.\nGuidewire is proud to be a disability inclusive employer. We are committed to providing individualized accommodations and support to candidates for any part of our hiring process. If you think you may need disability-related accommodations, please email EmployAbility at , our disability partner, or schedule a call with an EmployAbility expert (calendar booking slot) for a confidential conversation.","description_format":"text","description_chars":10056,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Retirement plans","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Artificial Intelligence","Predictive Analytics","Property & Casualty Insurance","InsurTech"],"lifecycle":[{"event":"open","at":"2026-10-08T23:30:25Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":3,"expected_fill_days":32,"reasons":["conf:2","velocity","win:early","comp:brand"],"computed_at":"2026-10-12T06:55:09Z"},"pay":{"stated_usd_annual":199000,"is_top_pay":true},"html_url":"https://alion.io/job/guidewire-senior-security-engineer","json_url":"https://alion.io/job/guidewire-senior-security-engineer.json","meta":{"generated_at":"2026-10-12T15:47:14Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":24944,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6488},"rest":"https://alion.io/mcp/rest/get_company?id=6488"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fguidewire-senior-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fguidewire-senior-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fguidewire-senior-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/guidewire-senior-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fguidewire-senior-security-engineer"}]}