Senior Security Engineer

About this role

Axios is seeking a Senior Security Engineer to lead the company’s defensive security posture across cloud infrastructure, platform services and AI integrations. The role focuses on threat modelling, vulnerability management, automated security testing, and embedding security controls throughout CI/CD and infrastructure pipelines. The engineer will work closely with engineering, product, infrastructure, and QE teams to align the security roadmap with business goals. The position requires strong cloud, AI security and governance capabilities and involves hands-on implementation and leadership responsibilities. Salary starts at $150,000 to $180,000, with compensation varying by location and experience for a remote-optional role.

What you would do

• Design and implement security controls across cloud infrastructure, platform services and AI integrations.
• Manage vulnerability management, threat modelling, incident response and proactive security assessments in AWS, Kubernetes and AI environments.
• Define and execute the long-term security roadmap in collaboration with engineering and executives.
• Embed automated security testing (SAST/DAST) and AI-driven compliance checks into CI/CD pipelines and IaC workflows.
• Oversee IAM, secrets management, encryption and zero-trust standards.
• Evaluate and deploy internal AI security tools and external defensive solutions for real-time threat mitigation.
• Lead threat modelling workshops and coach teams on secure coding and infrastructure practices.
• Collaborate with product, infrastructure, data and QE teams to integrate security across the development lifecycle.

What they are asking for

• Deep cloud and application security expertise including threat modelling, vulnerability scanning, IAM, secrets management, AI security and compliance frameworks.
• Strong experience with AWS infrastructure and security controls (IAM, KMS, EKS, RDS, S3).
• Experience hardening Kubernetes clusters, runtime security, container scanning and network policy enforcement.
• Proficiency in integrating SAST/DAST and security automation into CI/CD pipelines (GitHub Actions).
• Programming or scripting skills in Python, Go or Bash for security tooling and automation.
• Hands-on experience with SIEM, security logging, automated threat intelligence and AI-powered monitoring tools.
• Proven leadership in driving security initiatives and guiding engineering teams on risk.
• Excellent communication and stakeholder management skills to balance security and business needs.

Listing details are summarised from the source. Always confirm the role and the employer on the original posting before applying, and never pay to apply for a job.