← All roles

Sr. Security Engineer

C1· Engineering
Apply on company site
San Francisco Office, Remote, New York City, Portland Office$100k - $200kFull-timePosted 1mo ago

About the role

Senior Security Engineer role on a small, early-stage security team focusing on security engineering, application and cloud security, and compliance. Hands-on generalist with opportunities to specialize, primarily using Go and AWS, building automation to bake security into the development lifecycle.

Responsibilities

  • Define and drive security standards and secure-by-default solutions, serving as a subject matter expert for application and/or cloud security.
  • Build purpose-built agents and skills that orchestrate security into the development lifecycle through a risk-based approach, automating manual work (triage, enrichment, review).
  • Shift security left by baking risk-based review into design specs and architecture decisions.
  • Build security tooling and automation that scales security practices across engineering, and implement meaningful observability and detection signals.
  • Lead threat modeling and risk assessment for high-risk features and platform changes.
  • Assess and help mitigate security risks introduced by agentic development practices and AI-powered product features running in production.
  • Partner with engineering teams to prioritize and remediate critical threats, define API security standards, and conduct security code reviews.
  • Continuously explore and adopt open-source tools to assess the security of and test services.
  • Identify systemic security risks and lead multi-team remediation efforts end-to-end.
  • Partner across security, compliance, and engineering on cross-domain problems and be a go-to contact for hard security questions.
  • Contribute to compliance and trust initiatives (SOC 2, ISO 27001/42001) as they relate to the role.
  • Invest in the growth of teammates and raise the security bar across the broader engineering org.

Qualifications

  • Proven experience securing enterprise SaaS applications, including authentication flows, authorization patterns, and input validation at API boundaries.
  • Demonstrated experience securing deployment and change-management mechanisms for software and infrastructure.
  • Background in Software Engineering, Platform Engineering, Systems Engineering, Network Engineering, Cloud Security, or Application Security.
  • Hands-on code review experience, ideally in Go, Python, or Rust.
  • Experience with AWS (or another major cloud provider) and comfort working across cloud infrastructure.
  • Able to work independently and collaboratively in a fast-paced, high-growth environment.
  • Curious and current on modern security practices, tooling, and emerging threats, including AI-related changes to threat landscape.
  • Willingness to participate quarterly in-person in one of the primary offices in San Francisco or Portland, OR.

Skills

Required:Security standards and secure-by-default principlesSecurity automation and agent developmentThreat modeling and risk assessmentAPI security and code reviewCloud security and AWS

Benefits

  • Competitive salary
  • Meaningful equity
  • Comprehensive health benefits
Last updated Sep 10, 2026. Interested? Apply on the company site.
C1 logo

About C1

Access for the agentic era

C1 equips security and IT teams with a powerful autonomous identity security platform. Secure access with complete visibility, just-in-time provisioning, automated access reviews, and more.

Identity SecurityAccess ManagementIdentity GovernanceAI SecurityAccess ControlsAutomation
Company profileWebsite

More open roles at C1