What are the responsibilities and job description for the Senior Security Engineer position at WinMax Systems Corporation?
Senior Security Engineer
Location: San Francisco,CA (onsite)
Full Time
Job Description:
We are looking for a highly technical Senior Security Engineer who thrives on building security capabilities from the ground up. This role is ideal for someone who enjoys solving complex security challenges through engineering, automation, and AI rather than relying solely on commercial tools.
You will help build, and operate the next generation of security capabilities across our cloud-native SaaS platform, with a strong focus on AI security, automation, and scalable security operations.
This is a hands-on engineering role for builders, innovators, and problem-solvers who want to create security solutions that operate at scale.
You will help build, and operate the next generation of security capabilities across our cloud-native SaaS platform, with a strong focus on AI security, automation, and scalable security operations.
This is a hands-on engineering role for builders, innovators, and problem-solvers who want to create security solutions that operate at scale.
Looking for “ Very Strong Hands-on Security Engineering Builder” and not Security Analysts, Operations, someone who only build Security while configuring toolings.
What You’ll Do
Security Engineering
What You’ll Do
Security Engineering
- Design, build, and maintain security platforms, services, APIs, automation, and internal tooling.
- Develop solutions that streamline vulnerability management, Network Security, detection engineering, incident response, access governance, and security operations.
- Integrate cloud, identity, endpoint, SaaS, and security platforms through automation and modern engineering practices.
- Leverage AI extensively to accelerate investigations, automate workflows, improve decision making, and reduce operational overhead.
- Drive a build-first mindset by creating scalable solutions that improve security effectiveness and business agility.
AI & LLM Security
- Design and implement security controls for AI applications, LLM-powered services, agents, and AI development workflows.
- Build guardrails and security tooling to identify and mitigate risks such as prompt injection, data leakage, model misuse, excessive permissions, insecure plugins, and unsafe AI interactions.
- Develop monitoring, detection, and response capabilities for AI systems and AI-generated content.
- Partner with product and engineering teams to securely enable AI innovation across the organization.
Cloud, Identity & SaaS Security
- Secure cloud-native environments across AWS, Azure, Google Cloud Platform, and SaaS ecosystems.
- Build and maintain detections-as-code across cloud, identity, endpoint, SaaS, and application environments.
- Assess cloud architectures, IAM models, access controls, and security configurations.
- Partner with engineering teams to implement secure-by-design architectures and security best practices.
Security Innovation & Automation
- Continuously identify opportunities to leverage AI, automation, and modern engineering practices to solve security challenges.
- Develop custom security tools, dashboards, APIs, services, and integrations.
- Evaluate emerging technologies and drive adoption where they provide measurable security and operational value.
What We’re Looking For
Required Qualifications
- 5 years of experience in Security Engineering, or related cybersecurity roles.
- Bachelor or Masters in Computer Science, Cyber Security or similar roles.
- Strong software engineering mindset with demonstrated experience building production-grade tools, automation, and security platforms.
- Advanced proficiency in Python and experience building solutions through APIs, automation frameworks, and cloud-native technologies.
- Proven ability to build versus buy whenever practical and create scalable internal solutions.
- Strong understanding of cloud architecture, identity systems, networking, operating systems, and modern security principles.
- Hands-on experience securing AWS, Azure, or Google Cloud Platform environments.
- Experience with SIEM, EDR, WAF, Network Security, cloud security, SaaS security, IAM, and security monitoring technologies.
- Strong analytical, communication, and problem-solving skills.
Preferred Qualifications
- Experience building internal security products, platforms, and developer-focused security tooling.
- Experience with Kubernetes, containers, infrastructure-as-code, and modern SaaS architectures.
- Strong understanding of AI/LLM technologies, AI security risks, and secure AI development practices.
- Experience with detection engineering, threat hunting, adversary simulation, and detections-as-code.
- Knowledge of Zero Trust, modern identity architectures, and cloud-native security controls.
- Experience leveraging AI to transform security operations and engineering workflows.
- CISSP, CCSP, GCIH, GCFA, or equivalent certifications.