Senior Security Engineer
Job Summary
The Senior Security Engineer will build the security engineering layer for MLB's application delivery and cloud infrastructure. This role focuses on automating security workflows, integrating tools into CI/CD pipelines, and reducing preventable security issues. You will collaborate with engineering teams to implement scalable, AI-assisted security solutions while maintaining operational reliability.
Responsibilities
- Automate security workflows and CI/CD integrations.
- Build policy-as-code and cloud security guardrails.
- Implement AI-assisted remediation and security reviews.
- Support incident response and on-call rotations.
Required Skills
- Proficiency in Java, Go, or Python.
- Expertise in Kubernetes, Terraform, and GCP.
- Strong knowledge of CI/CD and DevSecOps practices.
- Experience with REST/GraphQL and API security.
Job Details
### Responsibilities
- **Application & Account Security**: Support anti-bot, anti-fraud, account-abuse, and application-abuse prevention through telemetry integration and automation. Build and deploy API security controls, including WAF, bot-management, and routing controls using IaC.
- **CI/CD Security & Software Supply Chain**: Integrate security testing (code, secrets, dependency, container, and IaC scanning) into developer workflows. Define findings severity levels and remediation routing models.
- **Infrastructure and Cloud Platform Security Guardrails**: Build policy-as-code for cloud, Kubernetes, and platform delivery. Create reusable security patterns to prevent risks like public exposure, insecure storage, and missing encryption.
- **AI-Assisted Security Engineering**: Identify and integrate AI-enabled development and security tools. Build governed AI-assisted workflows that preserve human approval, auditability, and data security.
- **Collaboration and Operational Support**: Drive adoption of secure engineering practices through practical guidance. Participate in on-call rotations to respond to escalated security issues.
### Qualifications & Skills
- Bachelor’s or Master’s degree in Computer Science, Software Engineering, Cybersecurity, or equivalent practical experience.
- 4+ years of experience in DevSecOps, software engineering, security engineering, cloud security, or infrastructure security.
- Proficiency in programming languages such as Java, Go, or Python for automation and tooling.
- Experience with REST and/or GraphQL APIs, testing, and debugging.
- Hands-on experience with DevOps tools including Kubernetes, Terraform, and GitHub Actions.
- Proficiency in cloud security concepts, specifically Google Cloud Platform (GCP).