[Hiring] Senior Security Engineer @Anaconda, Inc.

Role Description

Anaconda's Security team protects and enables our platform, serving 50 million users and supporting our transition into an AI-native development platform. As a Security Engineer, you'll build secure-by-default systems through hands-on engineering—designing controls that reduce systemic risk while helping engineering teams ship faster. Your work spans firewalls, IAM, endpoint detection, secrets management, and CI/CD pipeline security across hybrid and multi-cloud environments.

• Design and implement security controls across firewalls, IAM, endpoint detection and response, and secrets management in hybrid and multi-cloud environments.
• Build security automation and tooling using Python, Go, or Bash, managing infrastructure as code with Terraform to scale security operations.
• Conduct vulnerability and threat management by triaging scanner output, investigating root causes, and driving risk reduction across the platform.
• Perform code reviews and architecture assessments to identify security risks early in the development lifecycle.
• Embed security into CI/CD pipelines through static analysis, dynamic testing, and dependency scanning.
• Respond to security incidents as an escalation point, perform forensic analysis, and maintain tested runbooks for critical risks and zero-day events.
• Partner with Legal, IT, Platform Engineering, and Developer Experience teams to balance security rigor with developer velocity.
• Develop secure-by-default templates, libraries, and tooling that add velocity rather than friction.

Qualifications

• 6+ years hands-on experience in systems administration, DevOps, network engineering, or software development prior to or alongside security work.
• Proficiency with cloud platforms such as AWS, Azure, or GCP.
• Experience managing infrastructure as code using Terraform.
• Experience writing scripts and automation in Python, Go, or Bash.
• Working knowledge of IAM, PKI, cryptography basics, network protocol analysis, and threat modeling frameworks.
• Experience working in containerized environments with Docker or Kubernetes.
• Ability to communicate technical security risks to non-security audiences and design workflows that respect developer experience.

Requirements

• Offensive security experience through penetration testing, red teaming, bug bounty programs, or reverse engineering.
• Experience with advanced container security tools such as Falco or eBPF-based monitoring.
• Implemented zero trust architecture and network isolation in production environments.
• Production engineering, SRE, or software engineering background with experience writing custom static or dynamic analysis rules, or managing SBOM and supply chain security.
• Specialized expertise in HSMs, hardware tokens (YubiKeys, FIDO2), applied cryptography, or identity provider integrations.
• Contributed to security culture through training programs, threat modeling workshops, CTF events, conference talks, or open-source security projects.
• Thrived in fast-paced startup environments balancing speed with pragmatic risk management.
• Experience working in a fast-paced startup environment.
• Experience working in an open-source, AI, or data science-oriented company.

Benefits

• Flexible Vacation Policy.
• Medical, Dental, and Vision Insurance.
• Short Term and Long Term Disability.
• Paid Parental Leave.
• Monthly Wellness Stipend.
• Employee Assistance Program and Mental Health Resources.