{"id":984073,"url":"https://alion.io/job/redox-senior-security-engineer","title":"Senior Security Engineer","company":{"id":4460,"name":"Redox","domain":"redoxengine.com","url":"https://alion.io/company/redox","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"A","score":92,"open_postings":6,"ghost_share":0,"stale_share":0.333,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-16T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":165000,"max":190000,"currency":"USD","period":"year","gross":null,"usd_annual":190000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"GitHub Actions","optional":false},{"name":"Kubernetes","optional":false},{"name":"Kyverno","optional":false},{"name":"Node JS","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Prompt Engineering","optional":false},{"name":"Python","optional":false},{"name":"Slack","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false},{"name":"TypeScript","optional":false},{"name":"AI Agents","optional":true},{"name":"Amazon EKS","optional":true},{"name":"Apache Kafka","optional":true},{"name":"ArgoCD","optional":true},{"name":"Atlantis","optional":true},{"name":"Crossplane","optional":true},{"name":"Crowdstrike","optional":true},{"name":"Dependabot","optional":true},{"name":"Docker","optional":true},{"name":"Helm","optional":true},{"name":"Human-in-the-Loop","optional":true},{"name":"JavaScript","optional":true},{"name":"Karpenter","optional":true},{"name":"KEDA","optional":true},{"name":"LLM Guardrails","optional":true},{"name":"Model Context Protocol","optional":true},{"name":"NIST AI RMF","optional":true},{"name":"Okta","optional":true},{"name":"OWASP Top 10","optional":true},{"name":"PostgreSQL","optional":true},{"name":"Redis","optional":true},{"name":"Renovate","optional":true},{"name":"Sumo Logic","optional":true},{"name":"Tool Use","optional":true},{"name":"Velero","optional":true},{"name":"VPN","optional":true}],"status":"live","first_seen_at":"2026-09-15T16:16:57Z","employer_posted_date":"2026-09-15","last_verified_at":"2026-10-16T14:12:42Z","board_verified":true,"closed_at":null,"days_open":31,"trust":{"level":"ok","repost_count":1,"flags":[],"days_open":30},"description":"Opportunity & Impact\nWe are seeking a Senior Security Engineer to take ownership of cloud-native and application security across the Redox platform. This is a high-impact, hands-on IC role where you will move beyond identifying risks to actively hardening our environment, performing code reviews, and translating complex control gaps into engineering proposals that drive production impact.\nYou will function as a partner to our Engineering teams, embedding security into the SDLC through hands-on work across container security, Kubernetes hardening, and architecture reviews. You'll follow and reinforce our established security standards, helping make the secure path the easy path for the engineers you work with day to day.\nAs part of a small, senior security team, your day to day work will directly strengthen how we protect data for our customers, with impact concentrated in the systems and teams you own.\nWe're a fully remote team within the U.S. that operates with radical transparency and a strong bias toward ownership.\nOur Engineering Culture & How We Work\nTransparency, Ownership & Autonomy\nWe make room for everyone to be heard, regardless of level. We work openly, normalize not knowing things, and treat \"learning out loud\" as a feature, not a liability. You'll be expected to bring your real perspective, push back when you see something wrong, and commit fully once a decision is made. As a Senior Engineer, you help cultivate our culture: you model the behavior, you embrace questions, you acknowledge mistakes.\nWe default to public Slack channels over DMs, post Zoom summaries back in writing, and work async whenever possible. We'd rather expose incomplete thinking in public to get better feedback than protect it in private. That applies to security work too, when you identify a risk or propose a control, you bring it to the table with a recommendation, not just a concern.\nWe own the systems we maintain, not just the new features on the roadmap. You'll have room to identify platform security work, propose scope, consult on priority, and see it through from design to operationalization. We measure ourselves by the value we deliver, not the process we follow.\nJob Responsibilities:\nOwn Cloud Security Posture Management including Kubernetes and Container security practices, admission control, network policies, image integrity, and environment hardening.\n\nManage comprehensive vulnerability lifecycles, prioritizing remediation based on actual production exposure rather than simplistic finding metrics.\n\nCollaborate with Platform Engineering to support secure SDLC and CI/CD safeguards, focusing on artifact validity and pipeline integrity.\n\nConvert HITRUST and SOC 2 compliance frameworks into actionable technical configurations and operational controls.\n\nEvaluate and secure infrastructure-as-code across all environments.\n\nExecute incident response duties, encompassing forensic investigation and the facilitation of blameless post-mortem analyses.\n\nContribute to security standards within Engineering through design reviews, collaborative pairing, and mentorship of peers.\n\nSupport bug bounty triage and maintain professional engagement with external security researchers.\n\nRequired Skills & Experience:\n5+ years in security engineering with a track record of hands-on delivery across system hardening, security engineering projects, and peer mentorship.\n\nStrong technical proficiency in Kubernetes security, specifically network policy orchestration, admission control (Kyverno), and container hardening protocols.\n\nExperience with threat modeling for applications built using Node.js, TypeScript, Python or Go.\n\nHands-on experience supporting secure SDLC practices and CI/CD safeguards using GitHub Actions, ensuring artifact validity and pipeline integrity.\n\nDirect experience hardening Infrastructure-as-Code (Terraform) and managing enterprise secrets via AWS Secrets Manager, Vault, or similar platforms.\n\nSolid experience across the vulnerability management lifecycle, from initial triage to production remediation.\n\nAbility to apply compliance frameworks like HITRUST and SOC 2 into pragmatic technical controls that align with engineering workflows.\n\nStrong written communication skills, with the ability to clearly document decisions and collaborate effectively within a remote, asynchronous organizational culture.\n\nProficiency in AI tools and techniques, including prompt engineering and hands-on experience across multiple large language model platforms, with a demonstrated ability to automate workflows using AI.\n\nOur stack - you'll be hands-on with these:\nAWS, Docker, EKS\n\nCrowdstrike, Jamf, Okta, GuardDuty, Sumologic\n\nKyverno, Karpenter, KEDA, VPA, Velero, Crossplane\n\nGithub Actions, Terraform, Helm, ArgoCD and Atlantis\n\nPostgres, Redis, Kafka\n\nNice to have in your background:\nExperience securing autonomous agentic loops and tool-calling frameworks. Understanding of Indirect Prompt Injection and designing \"Human-in-the-Loop\" guardrails for agent-driven actions.\n\nTechnical familiarity with securing the Model Context Protocol (MCP), specifically regarding context isolation, sandboxing, and identity propagation between LLMs and private data sources.\n\nHands-on application of the NIST AI RMF, OWASP Top 10 for LLMs, etc within a production environment.\n\nGo, Node.js, or TypeScript (we're a TypeScript shop and it helps to be comfortable there).\n\nVPN administration or enterprise network security experience.\n\nDependency management tooling (Renovate, Dependabot).","description_format":"text","description_chars":5526,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Health Data & Interoperability"],"lifecycle":[{"event":"open","at":"2026-09-16T22:46:13Z"},{"event":"reopen","at":"2026-10-08T23:51:26Z"}],"visa":[],"liveness":{"score":39,"band":"fade","label":"Fading","p_open":1,"p_active":0.7,"p_room":0.55,"age_days":30,"expected_fill_days":29,"reasons":["conf:1","win:tail"],"computed_at":"2026-10-16T05:45:00Z"},"pay":{"stated_usd_annual":190000,"is_top_pay":true},"html_url":"https://alion.io/job/redox-senior-security-engineer","json_url":"https://alion.io/job/redox-senior-security-engineer.json","meta":{"generated_at":"2026-10-16T16:50:06Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1349,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4460},"rest":"https://alion.io/mcp/rest/get_company?id=4460"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fredox-senior-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fredox-senior-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fredox-senior-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/redox-senior-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fredox-senior-security-engineer"}]}