Lead Security Engineer (Full-/Part-time) (all genders)

In this role you drive the security engineering vision and delivery roadmap across products and shared platforms. You harden CI/CD pipelines, enforce secure defaults, and strengthen software supply-chain and cloud security in AWS. You translate standards into actionable controls while collaborating with engineering, security, legal, privacy, and compliance teams to enable secure, efficient software delivery. You combine strategic direction with hands-on implementation to scale secure engineering practices. A strong hook is your ability to turn frameworks into automated evidence and controls that support rapid, compliant releases.

• Own security engineering vision, strategy, standards, and delivery roadmap across products and shared platforms
• Harden CI/CD pipelines and establish secure defaults
• Improve software supply-chain and AWS cloud security
• Automate controls and audit evidence using GitHub, JFrog, Atlassian, and AWS
• Translate ISO 27001, SOC 2, EU Cyber Resilience Act and other requirements into practical controls
• Balance long-term direction with hands-on implementation to enable teams to deliver secure software
• Collaborate with engineering, enterprise security, legal, privacy, risk, and compliance to ensure compliance and security across initiatives

• Extensive hands-on experience in security engineering, platform engineering, application security, cloud security, or related fields
• Defined security strategies and standards and turned them into production-ready implementations
• Secured CI/CD pipelines, source control, build systems, artifacts, releases, and cloud platforms (GitHub, JFrog, AWS)
• Experience with IAM, infrastructure as code, vulnerability management, security testing, threat modeling, secrets, and software supply-chain security
• Understanding of risk-based control design and frameworks (ISO 27001, SOC 2, EU Cyber Resilience Act) and translating requirements into automated controls
• Clear communication, cross-team influence, and ability to balance security with developer experience and delivery speed
• Desirable: SBOM, provenance, attestations, artifact signing, release integrity, security considerations for AI-assisted development; Atlassian tools"
• Desirable_certifications_and_tools_desc_pkgs:unknown

• Clear communication
• Influence across teams
• Stakeholder collaboration
• GitHub
• JFrog
• AWS