Staff Security Engineer, Cloud and Product Security
LobDirect Mail company
United States$197,500 - $220,000Lead
Y Combinator
First Round Capital
Polaris Partners
Floodgate
Y Combinator Continuity Fund
Frontline Ventures
Software Engineering
About the role
TL;DR
Lead security engineering for cloud and product security, focusing on infrastructure, detection, and application security.
- •This is the senior technical security role at Lob, focusing on cloud infrastructure, detection and response, application security, and incident response.
- •You will partner with a dedicated GRC counterpart and report directly to the CTO.
- •Key Responsibilities Own the security posture of the AWS environment, including CNAPP and cloud misconfiguration risk.
- •Build and own the detection engineering practice on the SIEM and lead security incident response.
- •Manage the vulnerability management program across SCA, SAST, DAST, and container scanning.
- •Provide technical ownership of penetration tests and produce evidence for compliance needs.
- •Build tooling and automation to improve security operations.
- •Requirements 8+ years in security engineering with depth in cloud security.
- •Hands-on expertise with AWS security services, IAM design, and infrastructure as code.
- •Demonstrated detection engineering experience and real incident response experience.
- •Fluency in application security to review findings and judge severity.
- •Track record of shipping security improvements through other teams by earning trust.
Required skills
AWSTerraformIAMPenetration TestingHIPAASOC 2PythonBash
Nice-to-have skills
DockerKubernetes
Domain expertise
logisticscybersecurity
Benefits & perks
Equity, Remote work
Tech stack
AWSTerraformDockerKubernetesPythonBashIAMSOC 2HIPAA
