описание
Anaconda's Security team protects and enables our platform, serving 50 million users and supporting our transition into an AI-native development platform. As a Security Engineer, you'll build secure-by-default systems through hands-on engineering—designing controls that reduce systemic risk while helping engineering teams ship faster. Your work spans firewalls, IAM, endpoint detection, secrets management, and CI/CD pipeline security across hybrid and multi-cloud environments.
задачи
- Design and implement security controls across firewalls, IAM, endpoint detection and response, and secrets management in hybrid and multi-cloud environments
- Build security automation and tooling using Python, Go, or Bash, managing infrastructure as code with Terraform to scale security operations
- Conduct vulnerability and threat management by triaging scanner output, investigating root causes, and driving risk reduction across the platform
- Perform code reviews and architecture assessments to identify security risks early in the development lifecycle
- Embed security into CI/CD pipelines through static analysis, dynamic testing, and dependency scanning
- Respond to security incidents as an escalation point, perform forensic analysis, and maintain tested runbooks for critical risks and zero-day events
- Partner with Legal, IT, Platform Engineering, and Developer Experience teams to balance security rigor with developer velocity
- Develop secure-by-default templates, libraries, and tooling that add velocity rather than friction
требования
- 6+ years hands-on experience in systems administration, DevOps, network engineering, or software development prior to or alongside security work
- Proficiency with cloud platforms such as AWS, Azure, or GCP
- Experience managing infrastructure as code using Terraform
- Experience writing scripts and automation in Python, Go, or Bash
- Working knowledge of IAM, PKI, cryptography basics, network protocol analysis, and threat modeling frameworks
- Experience working in containerized environments with Docker or Kubernetes
- Ability to communicate technical security risks to non-security audiences and design workflows that respect developer experience
- Будет плюсом: Offensive security experience through penetration testing, red teaming, bug bounty programs, or reverse engineering; Experience with advanced container security tools such as Falco or eBPF-based monitoring; Implemented zero trust architecture and network isolation in production environments; Production engineering, SRE, or software engineering background with experience writing custom static or dynamic analysis rules, or managing SBOM and supply chain security; Specialized expertise in HSMs, hardware tokens (YubiKeys, FIDO2), applied cryptography, or identity provider integrations; Contributed to security culture through training programs, threat modeling workshops, CTF events, conference talks, or open-source security projects; Thrived in fast-paced startup environments balancing speed with pragmatic risk management; Experience working in a fast-paced startup environment; Experience working in an open-source, AI, or data science-oriented company
условия
- You'll thrive in a high-performance environment where results are recognized and rewarded
- Your work directly contributes to shaping the future of data science, machine learning, and AI in the enterprise.
- You'll work alongside a collaborative team that values diverse, thoughtful discussion, clarity and candor.
- You'll be supported by a culture that puts employees first - with flexible hours, a fully remote setup, and a genuine commitment to your wellbeing and growth.
- In addition to base salary, we offer a comprehensive benefits package that includes: Office setup reimbursement, Monthly productivity stipend, Learning and Development reimbursement, Open vacation policy*, Public holidays, Snake Days-quarterly extra day off company wide