Senior Security Engineer

Elios Talent is seeking a Senior Security Engineer to take ownership of the security posture across a complex, high-scale platform environment. This role involves partnering with engineering, data, and product teams to design secure systems and implement security practices in cloud-native architectures.

Responsibilities:

• Own and operate the platform’s security posture end-to-end across core controls including Vault, service mesh security (mTLS), network policies, and policy-as-code frameworks
• Design and implement zero-trust security architecture across services, infrastructure, and data layers
• Conduct threat modeling (STRIDE) for new services and features, documenting risks and mitigation strategies
• Implement and manage supply chain security practices including container scanning, image signing, SBOM generation, and dependency management
• Define and enforce identity and access controls (SAML, OIDC, OAuth, JWT) and integrate with enterprise identity providers
• Establish and enforce data security controls including classification, masking, tokenization, and API-level protections
• Own runtime detection and response, including alerting, SIEM integration, and signal optimization
• Lead security incident response, including containment, remediation, and post-incident analysis
• Design and enforce security controls for AI/LLM systems, including egress controls, prompt injection mitigation, and data protection
• Maintain security runbooks and lead regular internal security reviews

Requirements:

• 6+ years of experience in security engineering, platform security, or DevOps/SRE with a strong security focus
• Hands-on experience securing Kubernetes-based production environments (workload isolation, network policies, admission controls)
• Experience with secrets management and identity systems (Vault, PKI, SAML/OIDC, enterprise IdPs)
• Strong background in supply chain security and integrating security controls into CI/CD pipelines
• Experience contributing to or leading security incident response and remediation efforts
• Ability to work cross-functionally and influence engineering teams without blocking delivery
• Zero-trust architecture, defense-in-depth, and least privilege design
• Kubernetes security, policy-as-code (OPA/Gatekeeper, Kyverno), and network policy frameworks
• Service mesh security (Istio, mTLS, authorization policies)
• Supply chain tooling (Trivy, Cosign/Sigstore, Syft, Dependabot/Renovate)
• Identity and access protocols (SAML 2.0, OIDC, OAuth 2.0, JWT)
• Data security practices including PII protection, tokenization, and classification frameworks
• Runtime security and monitoring (Falco, SIEM integration)
• Scripting and automation (Python, Bash)
• Familiarity with compliance frameworks such as SOC 2, ISO 27001, and GDPR
• Experience designing security controls for AI systems, including prompt injection mitigation and data exfiltration prevention
• Understanding of risks in agent-based systems and LLM-integrated workflows
• Experience leveraging AI tools for threat modeling, policy generation, and vulnerability analysis
• Security-first mindset with a focus on enabling, not blocking, delivery
• Strong systems thinking across infrastructure, applications, and data
• Pragmatic approach to risk management and control implementation
• Ability to communicate complex security risks in clear, business-impact terms