Staff Security Engineer

At Procore, AI isn’t a specialized tool, it's a core competency. We expect every team member to be AI-literate, leveraging generative tools and agentic workflows to move faster and work smarter. You won’t just use AI; you’ll be building the agentic future of construction.

Configure and support IAM guardrails for cloud (AWS/GCP/Azure) and corporate (Okta) environments.

Implement and support automated pipelines for asset inventory and Software Bill of Materials (SBOM) generation.

Support the implementation of data protection tools and processes, including key management and encryption.

Implement secure configurations for our containerized (Kubernetes, EKS) and IaC (Terraform) workflows under the guidance of senior engineers.

Collaborate with Product & Technology teams to test and document resilience patterns.

Assist GRC and Internal Audit teams by gathering data and providing context on security controls.

Operate and triage alerts from security tools and platforms, and help drive remediation.

Participate in the evaluation of new security technologies and tools. Provide on-call support on a rotational basis

Bachelor's degree in Computer Science or equivalent practical experience.

8+ years of experience in a hands-on technical security or IT/ops role with a security focus.

Solid understanding of core security domains such as IAM, network security, and infrastructure security.

Hands-on experience with at least one major cloud provider (AWS preferred).

Hands-on experience identifying and exploiting common web/API vulnerabilities (e.g., Burp Suite usage) and secure API design. Proficiency in scripting to automate simple security tasks or checks.

Familiarity with identity and access management platforms platforms (IdP, IGA, PAM), joiner-mover-leaver (JML) mechanisms, and concepts (SAML, OAuth 2.0, OIDC, SCIM).