Salary not listed
Security Engineer
DevOpsRemote — US, Canada, Argentina
Published on 2026-10-14
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.
About this role
Hands-on individual-contributor role securing XBOW’s product, cloud, and platform as the company scales. The engineer will build preventive controls, improve security detection and response, and partner with engineering teams to remediate production risks.
About the company
XBOW builds an autonomous offensive security platform that uses AI to discover, validate, and exploit vulnerabilities for proof-backed pentesting.
The team
Security
Stack
AWSAzureGCPKubernetesSASTSCACNAPP
What you'll do
- Design and implement security controls across cloud, infrastructure, and internal platforms
- Harden cloud architecture, IAM, and infrastructure with engineering teams
- Lead product security reviews and threat modeling for features and architecture changes
- Operate and improve AppSec workflows, including SAST, SCA, secrets scanning, and IaC scanning
- Manage vulnerability intake, prioritization, exceptions, validation, reporting, and remediation SLAs
- Improve cloud security coverage and Kubernetes/container security posture
- Investigate and respond to security incidents, then drive post-incident hardening
- Automate security operations, access workflows, and incident response
What we're looking for
- 5+ years in security engineering, product security, cloud/platform security, or a related role
- Hands-on cloud security experience, particularly with AWS, Azure, and GCP
- Experience with application security, secure design reviews, threat modeling, and code-level risk discussions
- Experience operating AppSec tooling and processes at scale
- Strong vulnerability triage and remediation management, including risk-based prioritization and SLAs
- Experience with CNAPP or equivalent cloud security platforms and production Kubernetes/container security
- Cloud-native incident response and scripting or automation experience
- Able to partner with developers and platform teams in a fast-moving, remote-first environment
Nice to have
- Offensive security or penetration-testing experience
- Experience scaling startup security toward audit readiness
- Security certifications such as OSCP, OSCE, AWS Security Specialty, or Kubernetes security certifications
Benefits
- Meaningful stock options
- Comprehensive benefits and 401(k) plan
- Remote-first work with support for regular in-person collaboration and travel
- Opportunity to work with security and AI experts
Hiring process
- 30-minute introductory chat with a Talent Partner
- 30-minute Hiring Manager interview
- One-hour technical deep dive
- 30-minute interview with the Deputy CISO
- 30-minute final meeting with the CISO