[TEMPLATE JOB] EPD Software Engineer

Implement and maintain security controls across cloud infrastructure and employee endpoints.

Improve identity and access management, secure configuration, endpoint protection, logging, and monitoring.

Help strengthen network and application defenses, including DDoS protection and web application firewall controls.

Investigate security alerts and support incident response and follow-up improvements.

Identify, assess, and prioritize vulnerabilities across applications, infrastructure, endpoints, and third-party dependencies.

Partner with system owners to establish remediation timelines and track findings through closure.

Improve scanning coverage, reporting, and automation to reduce recurring risks.

Complete information security questionnaires and respond to security due diligence requests from customers and partners.

Partner with Sales, Legal, and Engineering on security reviews and security-related contract requirements.

Provide accurate documentation of our controls and practices, flagging gaps or commitments that require further review.

Maintain reusable responses and supporting evidence to improve consistency and turnaround time.

5+ years of relevant experience in security engineering, information security, or infrastructure engineering with substantial security responsibilities.

Hands-on experience securing cloud environments such as AWS, Google Cloud.

Working knowledge of endpoint security, identity and access management, network security, encryption, and security monitoring.

Experience with vulnerability assessment, risk prioritization, remediation tracking, and verification.

Familiarity with SOC 2 and ISO 27001 controls, audit evidence, and compliance workflows.

Understanding of application security fundamentals, including authentication, authorization, secure coding, and common web application vulnerabilities.

Ability to write scripts or automation in Python, Go, or a similar language.

Strong written and verbal communication skills, including the ability to explain security risks to technical and nontechnical audiences.

A practical, collaborative approach to balancing security requirements with business needs.

A degree in Computer Science, Information Security, or a related field, or equivalent practical experience.

Supporting customer security questionnaires, enterprise security reviews, or security-related contract discussions.

Coordinating penetration tests and working with engineering teams to remediate findings.

Implementing DDoS protection, web application firewalls, or endpoint detection and response tools.

Working in a growing SaaS company.

Security initiatives deliver measurable improvements across our cloud, endpoint, and application environments.

Vulnerabilities and assessment findings are prioritized appropriately and resolved within agreed timelines.

Compliance evidence is accurate, organized, and available when needed.

Customers and partners receive timely, consistent, and well-supported security responses.

Engineering and business teams have a trusted security partner who helps them make informed decisions.

Ambient.ai is proud to be an Equal Opportunity Employer. Ambient does not unlawfully discriminate on the basis of race, color, religion, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), gender identity, gender expression, national origin, ancestry citizenship, age, physical or mental disability, legally protected medical condition, family care status, military or veteran status, marital status, registered domestic partner status, sexual orientation, genetic information, or any other basis protected by local, state, or federal laws. Ambient is an E-Verify participant.