[Hiring] Senior Cybersecurity Engineer @Indico Data

Role Description

The Senior Cybersecurity Engineer is a hands-on technical security role responsible for improving Indico’s security posture across AWS, Kubernetes, CI/CD, product security, internal systems, and incident response. This role works in partnership with Indico’s CISO and CTO.

• Turn security priorities into practical technical controls, standards, reviews, and operating processes.
• Review Engineering work against security standards, with authority to request changes where needed.
• Partner with Engineering on AWS security controls, including IAM, networking, account structure, logging, encryption, key management, backups, production access, and customer-dedicated environments.
• Review and improve Kubernetes and container security controls, including workload identity, RBAC, network boundaries, image security, runtime monitoring, and deployment patterns.
• Define and improve secure CI/CD patterns, including GitHub permissions, branch protections, privileged workflows, secrets handling, release controls, and deployment access.
• Define and oversee processes for vulnerability management, committed-secret response, secure development, incident response, and access control.
• Provide product security support, including secure design review, threat modeling for sensitive features, scanner tuning, and high-risk change review.
• Improve detection and response coverage across tools such as CloudTrail, GuardDuty, CrowdStrike, SIEM/logging platforms, vulnerability scanners, and secrets detection.
• Own day-to-day security monitoring and response operations, including alert routing, triage expectations, escalation paths, and detection improvements.
• Coordinate technical containment during security incidents across Engineering, Platform, IT/Ops, and leadership.
• Maintain incident response runbooks and partner with the CISO on severity, executive escalation, counsel/compliance coordination, and customer communication strategy.
• Create practical security guidance, standards, procedures, and runbooks for security-sensitive work.
• Maintain reusable technical security documentation, standard responses, and evidence packages for customer due diligence and compliance support.
• Evaluate security tools and vendors with a focus on technical coverage, operational fit, and reducing manual work.
• Build or sponsor lightweight automation, checks, dashboards, and workflows that make security controls repeatable.

Qualifications

• 6+ years of relevant security experience, ideally in a startup, SaaS, cloud-native, or enterprise software environment.
• Strong hands-on experience with AWS security, including IAM, networking, logging, monitoring, encryption, access controls, and production security.
• Experience securing Kubernetes, containers, CI/CD pipelines, infrastructure-as-code, and modern cloud deployment patterns.
• Strong understanding of identity and access management, least privilege, privileged access, workload identity, and service-to-service permissions.
• Working knowledge of application and product security, including authentication, authorization, secure coding, common web risks, and secure design review.
• Experience defining or operating vulnerability management, secrets management, secure development, access control, or incident response processes.
• Experience with secrets management, cloud key management, encryption design, data residency, threat modeling, or secure SDLC programs.
• Experience with security monitoring, alert triage, incident response coordination, and remediation tracking.
• Experience with Python, Go, Bash, or other scripting languages for security automation.
• Ability to review infrastructure, application, and operational changes for material security risk.
• Ability to partner with Engineering and Platform while maintaining appropriate independence and oversight.
• Strong written and verbal communication skills, including clear technical guidance, standards, runbooks, and customer-facing security documentation.
• Good judgment around risk prioritization, compensating controls, exceptions, and startup-appropriate tradeoffs.
• Ability to operate independently, create structure, and drive work to completion.

Requirements

• Experience as a first or early security hire at a startup.
• Experience securing single-tenant SaaS or customer-dedicated cloud environments.
• Experience with AWS EKS, Terraform, Helm, ArgoCD, GitHub Actions, or similar infrastructure tooling.
• Experience with CrowdStrike.
• Experience supporting SOC 2, ISO 27001, HIPAA, GDPR, customer audits, or enterprise security questionnaires.
• Pragmatic, risk-based, comfortable with ambiguity, and focused on security practices people actually use.