[Hiring] Security Engineer @Censys

Role Description

This is a senior, high-ownership role on a small team. You will own the identity program, cloud security posture, and vulnerability management end to end, serve as a core incident responder, and build the automation that enables our team to operate at scale. Monitoring Censys's external attack surface with Censys is part of the job.

We're looking for someone well-rounded rather than narrowly specialized, who is energized by AI and wants to build with it, and who is comfortable deciding what matters most when everything looks urgent.

What You’ll Do:

• Identity & Access Management: Own identity as a program, drive down standing access and manual provisioning over time for joiner-mover-leaver changes and non-human identity management.
• Cloud Security (GCP-first): Harden and continuously improve our cloud-native environment, partner with SRE on infrastructure-as-code guardrails.
• Vulnerability Management: Own the program, asset coverage, risk-based prioritization, hands-on partnership with engineering on remediation.
• Detection & Incident Response: Build detection coverage, share in the security escalation rotation, maintain runbooks and run tabletops.
• AI and Agentic Security:
  • Securing our AI footprint.
  • Building with agents: Design and ship agentic security workflows.
• Security Automation and Slack-Native Operations: Meet people where they already work, ChatOps-driven requests and approvals.

Qualifications

• 5+ years in security engineering, with depth in at least two of: identity and access management, cloud security, vulnerability management, detection and response.
• Hands-on identity operations experience — SSO/SAML/OIDC, MFA and conditional access, device trust, lifecycle automation.
• Experience securing cloud-first or cloud-native environments. GCP preferred; strong AWS or Azure background.
• Scripting and automation ability — Python, Go, or similar.
• Incident response experience as a primary responder or lead on high-severity incidents.
• Genuine enthusiasm for AI, and hands-on experience building with LLMs or agent frameworks.
• Familiarity with a prescriptive control framework — ISO 27XXX, CMMC, FedRAMP.
• Comfort operating with ambiguity on a lean team.
• Strong written communication for an async, Slack-heavy environment.

Requirements

• Deep GCP expertise: organization policies, VPC Service Controls, workload identity federation.
• Experience securing or building agentic systems, MCP servers, or AI-enabled products.
• Detection engineering and SIEM or data-pipeline experience.
• Prior experience on a security team at a security product company.
• Direct experience taking an organization through CMMC assessment or a FedRAMP authorization.
• SOC 2, ISO 27001, ISO 42001, or GDPR experience.
• Defining and reporting security metrics to executive stakeholders.
• Open source contributions, published research, tooling, advisories, or conference talks.
• Relevant certifications such as GCP Professional Cloud Security Engineer, GIAC (GCFA, GCDA, GCSA), or OSCP.

Company Description

Censys’ mission is to be the one place to understand everything on the internet. We deliver real-time Internet intelligence and actionable threat insights to global governments, over 50% of the Fortune 500, and leading threat intelligence providers worldwide.