[Hiring] Senior Security Engineer @Indeed.com

Role Description

On the AppSec Assessments team, candidates should expect to play a central role in helping protect Indeed’s applications and services by identifying security risks early, partnering closely with product and engineering teams, and guiding practical remediation. This work requires exceptional technical judgment, clear communication, and the ability to influence without becoming a blocker. The team operates with the mindset that effective security comes from embedding into the development lifecycle, building trusted relationships, and helping teams make sound risk decisions in a fast-moving, cloud-native environment.

Candidates should also understand that this role goes beyond individual assessments. The team is growing and scaling, so there is a real opportunity to help shape how application security is delivered:

• Improving workflows and tooling
• Contributing operational metrics and guidance
• Mentoring others
• Raising the overall security bar through repeatable processes and excellent cross-functional partnership

It is a chance to do meaningful work with experienced security and engineering teams in support of Indeed’s mission, while helping secure a large-scale platform that serves millions of users daily.

Who you are:

• Work with cross-functional teams to identify, resolve, and mitigate security issues in Indeed’s systems and processes.
• Evaluate, architect, build, monitor and support security infrastructure for use by security and others in AWS.
• Adapt to a fast-paced and dynamic cloud environment and manage and update workflow of team’s tools.
• Propose, produce and review team metrics in support of security goals.
• As a subject matter expert, curate Indeed’s knowledge through documentation, procedures, playbooks, runbooks, awareness content, and/or other inter- and intra-team activities.
• Participate in incident responses and on-call rotation as necessary.
• Act as a point of escalation for investigation of systems and security events monitored by your team.
• Investigate transactional data, log files and/or other system outputs to identify malicious or anomalous activity.
• Build, maintain and mature Indeed’s ZTNA solution and Endpoint Security domain through further tool acquisition or further utilization of existing tools.
• Feed team members and constituents with trends in the information security community including new vulnerabilities, methodologies, and products.
• Serve as a mentor to junior members of the group and triage of incoming issues using ticket tracking systems to delegate to junior members.

Qualifications

• Requires a Bachelor’s degree in Computer Science, Computer Security, Engineering, Information Systems or related field, and a minimum of 5 years of related experience; or a Master’s degree with a minimum of 3 years of experience; or a PhD without experience.
• Experience in Information Security, particularly in Cloud environments, with extensive knowledge of AWS infrastructure and services.
• Skilled in developing, implementing, and maintaining security solutions in AWS.
• Significant experience in development, automation and scripting languages such as C#, Go, Java, Python, Rust, Ruby, HTML, Terraform, or JavaScript.
• Experienced in leveraging CI/CD deployment methodologies and infrastructure as code.
• Excellent understanding of Information Security concepts including defense in depth, zero trust, and experience managing a ZTNA platform.
• Expertise in at least one security domain (e.g., Incident Response, Application Security, Infrastructure Security, Endpoint Security and Response, Detection Engineering, Network Security, Cloud Security, Cryptography, IAM, or Red Teams) and proficient in virtualization and container security.
• You possess advanced knowledge of application security principles, frameworks, and technologies such as OWASP Top 10, SANS Top 25, NIST, etc.

Benefits

• Quarterly bonuses
• Restricted Stock Units (RSUs)
• Paid Time Off policy
• Many region-specific benefits