Senior Security Engineer
Job Description
Infinite Edge, Inc is building IcyBox to capture that moment of discovering something unexpected and loving it, turning it into a business. As a Senior Security Engineer, you will protect IcyBox, its customers, and their data by taking ownership of security across mobile and web apps, cloud infrastructure, and internal systems. This is an onsite role in New York, NY, based in New York City five days a week.
Salary: USD 180,000 - 220,000 per year. Experience: 5+ years.
What you’ll do
- Identify and remediate vulnerabilities across mobile, web, and backend applications.
- Secure the AWS environment, including access management, networking, and secrets.
- Run threat modeling and perform security reviews for new features.
- Embed security checks into CI/CD, including code scanning and dependency checks.
- Lead incident detection and response, including logging, alerting, and incident playbooks.
- Monitor security news and share relevant updates with the engineering team.
- Work on preventing account takeover, bots, and abuse across the site and app.
- Manage penetration tests, bug bounty reports, and vendor security reviews.
- Support compliance efforts, including PCI DSS and privacy laws.
- Train engineers on secure coding practices.
What you bring
- 5+ years in security engineering, application security, or cloud security.
- Hands-on experience securing AWS environments.
- Strong understanding of web and mobile application security, including the OWASP Top 10.
- Ability to read and write code in at least one language, such as Rust, Python, Go, or TypeScript.
- Experience leading incident response.
- Ability to explain risk clearly and provide engineers with practical remediation guidance.
Technologies
- AWS
- CI/CD
- Code scanning
- Dependency checks
- OWASP Top 10
- Rust, Python, Go, TypeScript
- PCI DSS
Values at Infinite Edge
- Move Fast, Build Right: Ship today, fix tomorrow.
- Own the Gap: If nobody owns it, we step in.
- Clarity Is a Gift: Turn noise into decisions and action.
- Trust Over Title: Follow-through beats position.
- Say the Real Thing: Hard conversations happen early.
- Do the Unglamorous Work: No task is beneath us.
Nice to have
- Experience with production Rust, React, and React Native systems.
- E-commerce or payments security experience, including PCI DSS.
- Experience with fraud, bot, and account takeover prevention.
- SIEM tools and detection engineering experience.
- Certifications such as OSCP, CISSP, or AWS Certified Security – Specialty.
- Experience as a first security hire or early security team member at a startup.
Similar Jobs
Q