{"id":3178900,"url":"https://alion.io/job/later-senior-security-engineer-3","title":"Senior Security Engineer","company":{"id":5266,"name":"Later","domain":"later.com","url":"https://alion.io/company/later","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":93,"open_postings":10,"ghost_share":0,"stale_share":0.3,"repost_share":0,"time_to_fill_p50_days":59,"computed_at":"2026-10-26T05:57:25Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Boston, United States","Vancouver, Canada","Chicago, United States","Los Angeles, United States","New York, United States","San Francisco, United States","Washington, United States"],"countries":["US","CA"],"hiring_countries":["US","CA"],"hiring_countries_total":2,"salary":{"min":125000,"max":205000,"currency":"USD","period":"year","gross":null,"usd_annual":205000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"C#","optional":false},{"name":"CI/CD","optional":false},{"name":"CloudFormation","optional":false},{"name":"GCP","optional":false},{"name":"ISO 27001","optional":false},{"name":"OWASP","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-10-23T17:48:25Z","employer_posted_date":"2026-10-23","last_verified_at":"2026-10-27T01:22:58Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"Later is the world’s most intelligent influencer marketing company, built to give brands the confidence to create unforgettable campaigns. By combining real creator relationships, trusted intelligence, and expert guidance, Later removes fear and guesswork from one of marketing’s most visible investments.\nBuilt on a native, AI-powered platform and more than a decade of proprietary data-including billions of social interactions, impressions, and $2.4B+ in verified influencer-driven purchases-Later helps teams understand what will work before they launch.\nBy combining trusted insight with expert guidance, Later removes guesswork from influencer marketing, enabling brands to choose the right creators, execute fully managed campaigns, and drive meaningful growth across awareness, engagement, and revenue. Trusted by leading enterprise brands including Nike, Wayfair, Unilever, and Southwest Airlines, Later bridges creativity and performance so campaigns don’t just look good-they deliver results. Learn more at later.com.\nSenior Security Engineer\nAbout this position:\nWe're looking for a Senior Security Engineer to strengthen Later's company-wide security posture through hands-on engineering, thoughtful collaboration, and pragmatic standards. This role blends deep security expertise with strong software engineering skills, with a focus on application security, cloud and infrastructure security, secure development practices, vulnerability management, compliance enablement, and security improvements across our corporate systems and business operations. You'll partner closely with teams across Engineering, Infrastructure, Product, IT, Legal, People, Finance, and other business functions to embed security into Later's systems, tools, workflows, and operating practices. A core focus of this role is helping Later mature its security capabilities in support of SOC 2 and other compliance expectations through practical controls, automation, evidence-ready processes, and clear guidance that works across the company. This role is ideal for a senior security practitioner who thinks like a defender, builds like a software engineer, and leads through influence across both technical and non-technical teams.\nWhat you'll be doing:\nCompany-Wide Security Strategy & Compliance\nAssess and continuously improve Later's overall security posture across applications, infrastructure, cloud environments, corporate systems, vendor tooling, and business workflows.\nDefine and implement scalable security standards, best practices, and guardrails that support SOC 2 readiness through practical, automated, and auditable solutions.\nPartner with Engineering, Infrastructure, IT, Product, Legal, People, Finance, and business leaders to align security priorities with company goals, risk reduction, and delivery timelines.\nTranslate SOC 2 and related compliance requirements into sustainable technical and operational controls, procedures, and evidence collection practices.\nIdentify security gaps across the company, prioritize remediation efforts, and help teams make pragmatic, risk-based decisions.\nSupport company-wide security awareness, secure operating practices, and adoption of security controls across business teams.\nTechnical Execution\nBuild and maintain internal security tools, automation, and services that support secure development, compliance workflows, vulnerability management, corporate security operations, and operational visibility.\nDesign and implement security controls within CI/CD pipelines, including secure build and deploy patterns, security scanning, dependency management, container scanning, and secret management.\nSupport application security efforts, including secure design reviews, threat modeling, code review guidance, API security, microservices security patterns, and remediation planning.\nImprove cloud infrastructure and corporate systems security through hardening, monitoring, configuration review, Infrastructure-as-Code security scanning, access reviews, and secure operational patterns.\nCollaborate with technical and business teams to identify vulnerabilities and control gaps, explain impact clearly, and drive effective remediation.\nStrengthen security observability and response readiness through logging, alerting, detection engineering, incident response improvements, and company-wide security process maturity.\nCollaboration & Enablement\nPartner with teams across the company to identify, understand, and fix security issues in a collaborative, non-blocking way.\nProvide pragmatic security guidance on designs, implementations, vendor tools, operational practices, and business workflows.\nCommunicate security risks, tradeoffs, and recommendations clearly across technical and non-technical audiences.\nEmbed security into development workflows, corporate systems, and company operating practices without slowing teams unnecessarily.\nSupport SOC 2 and related compliance efforts through automation, well-defined controls, reliable evidence practices, and cross-functional coordination.\nWhat success looks like:\nWithin the first 90 days, you've completed a security posture assessment, identified the highest-priority gaps, and have a remediation roadmap that's been reviewed and socialized with key stakeholders across Engineering, IT, and Leadership.\nBy 6 months, core SOC 2 controls are documented, automated where possible, and evidence collection is running reliably without manual heroics from any single team.\nSecurity is embedded into Later's CI/CD pipelines, with scanning, secret management, and container security integrated and maintained as a standard part of the development lifecycle.\nTeams across Engineering, IT, and the business have a clear point of contact for security questions, a shared understanding of the risk landscape, and security guidance that helps them move faster, not slower.\nLater's security observability has materially improved: logging, alerting, and detection coverage are in place, and the company has a documented, practiced incident response process.\nWhat you bring:\nWe are committed to building an inclusive, supportive place for you to do the best and most rewarding work of your career. If you identify with any of the following, we encourage you to apply!\n5-7+ years of experience as a Security Engineer or Software Engineer with a strong security focus.\nProven ability to build and operate production-quality software, automation, and internal tooling.\nStrong understanding of application security, infrastructure security, cloud security, secure CI/CD practices, and corporate security controls.\nHands-on experience with vulnerability management, secure software development, threat modeling, remediation workflows, and operational security improvements.\nExperience with security frameworks and standards such as OWASP, NIST, CIS Controls, SOC 2, and ISO 27001, and the ability to apply them in production and business environments.\nExperience supporting SOC 2 compliance efforts through practical, automated, and auditable controls.\nFamiliarity with cloud security platforms such as AWS Security Hub, Azure Security Center, or GCP Security Command Center.\nExperience with SIEM/SOAR tools, logging and monitoring platforms, detection workflows, and practical incident response processes.\nExperience with Infrastructure-as-Code security scanning for tools such as Terraform or CloudFormation.\nAbility to translate complex security concepts into clear, actionable guidance for technical and non-technical audiences.\nExperience collaborating closely with engineering, IT, compliance, and business teams to improve security outcomes.\nFamiliarity with C#, modern backend systems, cloud-native architecture, and SaaS business tooling.\nHow you work:\nDriven by Impact: You deliver results that matter, prioritizing high-value work, meeting deadlines, and adapting quickly while keeping outcomes clear.\nStrategic & Customer-Centric: You anticipate risks and opportunities, connect decisions to long-term growth, and build trust through proactive insights.\nCurious & Growth-Oriented: You seek knowledge, ask sharp questions, and apply learnings fast, challenging the status quo with a mindset of improvement.\nCollaborative & Resilient: You thrive in change by staying resourceful, solution-focused, and positive, removing roadblocks, sharing insights, and keeping morale high.\nAccountable & Honest: You own your work, hold yourself and others to a high bar, and use transparent feedback to drive growth.\nEmotionally Intelligent: You build trust through empathy and collaboration, foster inclusion, and inspire others with grit, optimism, and integrity.\nOur approach to compensation:\nWe take a market-based & data-driven approach to compensation. We leverage data from trusted third-party compensation sources to help us understand the market value of a role based on function, level, geographic location, and scope. We evaluate compensation bi-annually, including performance and market-related factors.\nOur salaries are benchmarked against market Total Cash Compensation for the geographic location of our job posting. \nTo comply with local legislation and ensure transparency, we share salary ranges on all job postings. Skills, experience and other factors help determine the final salary we offer which may vary from the original range posted.\nAdditionally, all permanent team members are eligible to participate in various benefits plans as part of their overall compensation package.\nFor candidates located in the US: $125,000-205,000 USD\nFor candidates located in the Canada: $110,000-160,000 CAD\nWhere we work:\nWe have offices in Boston, MA; Vancouver, BC; and Vancouver, WA. For select positions, we are open to hiring fully remote candidates. We post our positions in the location(s) where we are open to having the successful candidate be located. \nDiversity, inclusion, and accessibility:\nAt Later, we are committed to fostering a culture rooted in an inclusion-first mindset at every level of the company, embracing the importance of hiring and building teams for culture add rather than culture fit. We openly build and maintain unbiased hiring, pay, and promotion practices to create a foundation for an equitable workplace, paving the way for systemic change.\nWe are committed to creating a diverse environment and are proud to be an equal opportunity employer. All applications will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, national origin, disability, or age. Please let us know if you require any accommodations or support during the recruitment process.","description_format":"text","description_chars":10643,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"phd","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"},{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Influencer Marketing","Social Media Analytics & Listening"],"lifecycle":[{"event":"open","at":"2026-10-23T20:42:42Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":2,"expected_fill_days":59,"reasons":["conf:3","velocity","win:early"],"computed_at":"2026-10-26T05:57:25Z"},"pay":{"stated_usd_annual":205000,"is_top_pay":true},"html_url":"https://alion.io/job/later-senior-security-engineer-3","json_url":"https://alion.io/job/later-senior-security-engineer-3.json","meta":{"generated_at":"2026-10-27T01:56:10Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1058,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5266},"rest":"https://alion.io/mcp/rest/get_company?id=5266"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Flater-senior-security-engineer-3"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Flater-senior-security-engineer-3"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Flater-senior-security-engineer-3"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/later-senior-security-engineer-3\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Flater-senior-security-engineer-3"}]}