EngineerJobs.io
← Back to all jobs
Rainmaker Technology Corporation

Sr. Security Engineer

Rainmaker Technology Corporation
El Segundo, CA $128k - $225k/yr Full time Posted 8d ago
Senior Application Security Aws Cloud Security Cloud Security Cybersecurity Operations Identity and Access Management Information Security InfoSec Security Security Automation Security Operations Security Testing Software Security
Apply Now

Job Description

Rainmaker Technology Corporation is building security into the systems that support aircraft and field operations, from software and hardware to daily workflows. As a Sr. Security Engineer, you will help establish secure defaults across AWS and application platforms, automate controls and checks, and strengthen detections and incident response.

This onsite role is based in El Segundo, CA and comes with meaningful stock options, comprehensive medical, dental, and vision coverage, a 401(k) with employer matching, unlimited PTO, and paid parental leave for both parents. Daily lunch is provided at the El Segundo headquarters, and relocation assistance is available for eligible roles.

What you’ll do

  • Map critical systems, data flows, and access paths, then translate the highest-priority risks into a practical, staged plan.
  • Build reusable, secure-by-default AWS infrastructure with platform engineers, focusing on least-privilege access, network boundaries, and logging for scientific and operational systems.
  • Review application designs and code, establish reusable authentication and authorization patterns, and resolve vulnerabilities at their source.
  • Automate access provisioning and revocation, secrets management, and credential rotation across production and company systems, with clear audit trails and recovery paths.
  • Integrate security checks into development and deployment workflows to identify exposed secrets, vulnerable dependencies, and unsafe configuration changes before release.
  • Develop practical detections and automate evidence gathering for investigations; partner with system owners to test incident response and recovery.
  • Make Google Workspace and device configurations secure by default, working with People and Operations to improve onboarding and offboarding.
  • Collaborate with aircraft and field teams on secure remote access and communications for systems with intermittent connectivity.
  • Test, monitor, and document security automation so other engineers can maintain it; simplify controls that create unnecessary alerts, exceptions, or recurring manual work.

Required qualifications

  • Experience building and maintaining security automation in production, including measurable risk reduction, test approach, failure handling, and manual work elimination.
  • Strong software engineering skills in Python, TypeScript, or a similar language, including testing, code review, deployment, and operating what you build.
  • Hands-on cloud security experience, with the ability to express access policies, network boundaries, and logging requirements as infrastructure as code.
  • Practical understanding of application security including authentication, authorization, secrets management, and common web and API vulnerabilities.
  • Experience investigating security findings and carrying fixes through deployment and verification.
  • Sound judgment around risk, reliability, and maintenance costs, including choosing simple, effective controls and clearly defining next steps.
  • Ability to work independently, communicate clearly with engineers and non-engineers, and follow through on cross-team work.

Skills and tools

AWS, Python, TypeScript, Google Workspace, Terraform, Pulumi, GitHub, Buildkite, Tailscale, WireGuard

Benefits

  • Meaningful stock options and the chance to help shape Rainmaker as an early team member.
  • Comprehensive medical, dental, and vision insurance.
  • A 401(k) with employer matching.
  • Unlimited PTO for rest, exploration, and personal pursuits.
  • Paid parental leave for both parents.
  • Daily lunch provided at the El Segundo headquarters.
  • Relocation assistance for eligible roles.

What success looks like in the first 90 days

  • Critical systems and access paths are mapped, and the highest-priority risks are aligned on with the team.
  • A secure configuration or access control is deployed on a critical system, with tests that catch unsafe changes.
  • A recurring security workflow runs automatically with monitoring, a tested recovery path, and documentation that supports operations without daily intervention.
  • A detection and response path is tested with the engineers who will use it, with agreed next improvements.

Similar Jobs