{"id":3313448,"url":"https://alion.io/job/lumos-senior-security-engineer","title":"Senior Security Engineer","company":{"id":4827,"name":"Lumos","domain":"lumos.com","url":"https://alion.io/company/lumos","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":{"label":"PT","utc_offset_min":-8,"utc_offset_max":-8},"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":123000,"max_usd":221000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":390},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"GitHub","optional":false},{"name":"Go","optional":false},{"name":"IAM","optional":false},{"name":"Intercom","optional":false},{"name":"Least Privilege","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"OpenAI","optional":false},{"name":"Python","optional":false},{"name":"TypeScript","optional":false},{"name":"Azure","optional":true},{"name":"GCP","optional":true},{"name":"ISO 27001","optional":true},{"name":"SOC 2","optional":true},{"name":"Threat Modeling","optional":true}],"status":"live","first_seen_at":"2026-10-27T01:52:51Z","employer_posted_date":"2026-10-27","last_verified_at":"2026-10-28T21:20:27Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Every breach, every failed audit, every new hire stuck in onboarding purgatory traces back to the same question: who has access to what - and should they?\nIdentity is where modern companies break. Too much access leaks data. Too little grinds the business to a halt. Lumos is the industry's first Autonomous Identity Platform - software that doesn't just surface access risk, but acts on it. We started with a self-service AppStore and grew into the critical infrastructure connecting apps, identities, and data for GitHub, MongoDB, Mars, Pinterest, Anduril, Intercom, Roku, and Netskope. At the center is Albus, our AI agent for identity - mining roles, approving access, and catching the drift humans miss.\nYou'll ship work that thousands of IT and security teams touch every day. You'll own problems without playbooks, because the category is being redefined in real time - by us.\nWhy Lumos?\nJump on a rocketship. Since launching out of stealth in April 2022, we've grown from 20 to ~130 Alchemists and raised over $65M from a16z, Scale, Neo, Greg Brockman (President at OpenAI), and Phil Venables (CISO at Google).\n\n⭐ Customers love us - and so does the industry. Named a Strong Performer in the 2026 Gartner Voice of the Customer for IGA - 4.7/5, with 96% of reviewers saying they'd recommend us. Our customers cut time-to-access by 98%, slash IT tickets by 72%, and eliminate excess privilege at scale.\n\nA culture worth joining. Three years running on Forbes' Top 100 Best Startup Employers in America (2024, 2025, 2026) - measured on culture, retention, growth, and job creation. That's our Alchemists, not our marketing. See what we live by here.\n\nAs a Senior Security Engineer at Lumos, you’ll shape the identity platform thousands of IT and security teams rely on to protect their data. You’ll build the security foundations every Lumos product runs on and be a trusted voice when our largest customers ask how we keep them safe.\nYour Responsibilities\nDesign and ship core security platform systems in the Lumos codebase, such as request context propagation across services, scoped API tokens, our authorization service, and decoupling authentication from synced identities.\n\nLead multi-sprint security projects end to end, coordinating with engineers on other teams to get them delivered.\n\nRun security architecture reviews and threat models for new products (for example our MCP Governance gateway and on-device policy checks) before they scale, and turn findings into tracked, prioritized work.\n\nDrive least-privilege access to our own production systems (databases, data pipelines, AWS IAM, secrets).\n\nTriage, route, and fix vulnerabilities from pentests, cloud assessments, and dependency scanning, and coordinate retests.\n\nTake part in security oncall and incident response, and help answer security questions from customers and prospects.\n\nWhat We're Looking For\n5+ years of software engineering experience, with at least 3 focused on security (application, product, or platform security).\n\nA track record of designing, shipping, and operating production security systems, not only reviewing them. Examples: authentication and authorization frameworks, token and session management, secrets management, audit logging.\n\nStrong backend skills. Python and TypeScript are a strong plus. Go is welcome.\n\nClear written communication. You can explain a risk and a trade-off to engineers, PMs, and customers alike.\n\nNice to have: identity protocols (OAuth 2.0, OIDC, SAML, SCIM), policy engines (OPA, Zanzibar-style models, Cedar), SOC 2 or ISO 27001 environments, general background in IAM, and/or growth-stage startup experience.\nHands-on experience with threat modeling, secure design review, and finding and fixing vulnerabilities in a real codebase.\n\nExperience securing cloud infrastructure on AWS (equivalent GCP or Azure experience considered), including IAM and Infrastructure as Code.\n\n⭐ What We Value\nWe also care about whether you would be a good fit for Lumos based on the values and characteristics that define how we achieve outcomes, not just your resume.\nLumos is an equal opportunity employer committed to building a diverse and inclusive workplace. We do not discriminate on the basis of race, national origin, gender, sexual orientation, gender identity, protected veteran status, disability, age, or other legally protected status. If you require any reasonable accommodations, please let us know at any time.\nThank you for considering Lumos, we hope to hear from you!\nPay Range\n$155,000 - $200,000 plus equity + benefits (Note that this range is a good faith estimate of likely pay for this role; upon hire, the pay may differ due to skill and/or level of experience.)\n\nBenefits and Perks:\nRemote-first culture - Work from anywhere within ±4 hours of Pacific Time.\n\nMedical, dental & vision insurance - 100% of premiums covered for employees, 60% for dependents. HSA and FSA available with employer contribution. International benefits align with local standards.\n\nMental health support - Access to mental health resources and support.\n\nMonthly wellness stipend - A monthly stipend for gym memberships, fitness apps, and whatever helps you recharge.\n\nLife & disability insurance - Life insurance, short-term disability, and long-term disability coverage available.\n\nFlexible PTO - Flexible time off with a minimum annual requirement, because rest is part of doing your best work.\n\nParental leave - Up to 16 weeks of paid parental leave for expecting parents.\n\n$1,000 annual learning stipend - An annual budget for courses, books, conferences, and certifications.\n\nCompany & team offsites - Company and team bonding trips throughout the year, fully covered by Lumos.\n\n401(k) with matching - Employer 401(k) matching to help you save for the future.","description_format":"text","description_chars":5778,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Flexible time off","Gym membership","Life insurance","Parental leave","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Identity Management","Information Security","Security Compliance"],"lifecycle":[{"event":"open","at":"2026-10-27T04:08:31Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":63,"reasons":["conf:2","velocity","win:early"],"computed_at":"2026-10-28T05:59:10Z"},"pay":null,"html_url":"https://alion.io/job/lumos-senior-security-engineer","json_url":"https://alion.io/job/lumos-senior-security-engineer.json","meta":{"generated_at":"2026-10-29T00:55:58Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1384,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4827},"rest":"https://alion.io/mcp/rest/get_company?id=4827"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Flumos-senior-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Flumos-senior-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Flumos-senior-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/lumos-senior-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Flumos-senior-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3313448}},{"tool":"search_jobs","arguments":{"company":"lumos.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3313448},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}