Security Engineer

Design and implement security controls across Gamma’s AWS infrastructure and application layer

Build security tooling and automation to detect, prevent, and respond to threats at scale

Conduct security reviews of architecture designs, code, and infrastructure changes

Lead vulnerability management, coordinate bug bounty responses, and drive remediation priorities

Develop and maintain security monitoring, alerting, and incident response capabilities

Partner with engineering teams on secure coding practices and threat modeling

Deploy AI-assisted vulnerability scanning across our codebase and infrastructure—scanning our own systems with frontier models before attackers do

Build automated triage workflows that use AI to deduplicate findings, estimate exposure, and draft remediation tickets

Drive adoption of memory-safe languages and secure-by-design practices for new code, informed by current CISA and NCSC guidance

5+ years of software engineering experience with at least 2–3 years focused on security engineering or application security

Strong hands-on experience securing AWS environments, including IAM, VPC, security groups, CloudTrail, and GuardDuty

Proficiency in at least one backend language (Python, TypeScript/Node.js, or Go preferred) with experience building security tools

Deep understanding of web application security including OWASP Top 10, common vulnerability classes, and authentication/authorization patterns, with experience implementing security controls in CI/CD pipelines and infrastructure-as-code (Terraform, CloudFormation)

Clear communicator who works well embedded with product engineering teams

Background in penetration testing, offensive security, and SIEM/log analysis

Experience at a high-growth SaaS startup navigating rapid scaling and compliance

Familiarity with AI/ML security tooling, including using frontier models for code scanning, automated pentesting, or threat detection

Experience building zero trust architecture or identity-aware access controls (FIDO2, short-lived tokens, hardware-bound credentials)

Knowledge of supply chain security frameworks like SLSA, OpenSSF Scorecard, or SBOM tooling

The base salary for this full-time position, which spans multiple internal levels depending on qualifications, ranges between $180K - $310K plus benefits & equity.

Final offer amounts are determined by multiple factors, including but not limited to experience and expertise in the requirements listed above.

If you're interested in this role but you don't meet every requirement, we encourage you to apply anyway! We're always excited about meeting great people.