Sr. Software Engineer, Security

SPAN is mission-driven to design, build, and deploy products that electrify our built environment, decarbonize our world, and slow the effects of climate change. They are seeking a hands-on, autonomous Sr. Software Engineer, Security to drive the technical execution of SPAN’s software security initiatives, including architecting and deploying foundational security tools and frameworks.

Responsibilities:

• Design and build automated security tools, paving the way for self-service security guardrails that empower developers without sacrificing velocity
• Drive the triage and resolution of security vulnerabilities across our backend stack—directly writing code to patch CVEs yourself when needed, while partnering with engineering teams to architect broader, deeper structural fixes
• Serve as the technical lead for hardening our AWS production environments, ensuring top-tier alignment with modern industry standards and compliance
• Conduct deep-dive threat modeling and security architecture reviews for high-impact, complex systems and net-new platform features

Requirements:

• 6+ years of dedicated experience in security engineering, application security, or DevSecOps
• Understanding of authentication and authorization protocols (OIDC, SAML and OAuth)
• Expertise in securing, auditing, and hardening cloud ecosystems, with a strong emphasis on AWS environments
• Experience balancing tactical, fast-paced vulnerability patching with strategic, framework-level remediation alongside development teams
• Proficient in writing production-grade code in at least one of our core backend languages: Python, Java or Node