Security Engineer

Endex is hiring a Security Engineer to help strengthen the security of both applications and infrastructure. In this onsite role in Denver, CO, you will work alongside engineering teams to uncover practical security weaknesses, manage vulnerabilities through remediation, and improve secure development and detection or prevention capabilities.

The work spans reviewing product architecture, building technical defenses, and applying risk-based judgment so fixes land where they will matter most for real users and production systems.

What you’ll do

• Secure product architecture: Review authentication, authorization, tenant boundaries, and data flows to identify weaknesses before they reach production.
• Build technical defenses: Improve cloud identity, secrets management, application protections, and security checks in partnership with engineers.
• Manage vulnerabilities: Investigate findings, prioritize remediation work, and verify that fixes address the issues.
• Support secure development: Create helpful checks and guidance that can be incorporated into engineering workflows.
• Investigate and learn: Analyze security incidents and develop detection or prevention improvements tied to the underlying failure mode.

What you bring

• Security engineering experience: Experience investigating and remediating real application or cloud security issues.
• Software fluency: Ability to read code, build tooling, and work directly with production systems.
• Risk judgment: Prioritize based on impact and how systems are used.
• Clear communication: Explain findings and fixes in a way engineers can act on.
• Practical security depth: Ability to inspect code and cloud systems, verify findings, and help implement fixes that engineers can maintain.

Locations and commitment

• Primary locations: New York City (Primary), Denver
• Additional locations: Chicago, Singapore (APAC), London, San Francisco, Austin, Los Angeles
• Onsite commitment: 5 days in-person

Benefits

• Health & Dental Insurance
• Monthly Wellness Stipend
• 401K Matching

Nice to have

• Experience with cloud and identity security
• Experience with enterprise SaaS or AI applications
• Experience with cloud IAM, application security, threat modeling, or securing AI systems