Security Engineer

About the Team & Role

At Auger, our mission is powered by a robust and scalable cloud infrastructure that supports real-time analytics, machine learning, and advanced AI solutions. The Security Team is responsible for securing Auger, our platform, and most importantly, our customer's data.

As a Security Engineer at Auger, you will own the definition and implementation of security measures to protect our products and data throughout their lifecycle. You'll be responsible for securing our cloud infrastructure, performing incident response, and helping our development teams build our platform securely.

• Design, audit, test, and implement cloud security controls.
• Define cloud security requirements and standards for product development.
• Collaborate with cross-functional teams to integrate security into product roadmaps.

• Conduct threat modeling and risk assessments to identify potential security vulnerabilities.
• Prioritize and manage security risks, ensuring timely mitigation.
• Implement security controls in our products and educate developers on best practices to minimize risks.

• Triage, investigate, and help remediate security incidents.
• Help develop incident response runbooks and detection rules.
• Participate in incident retrospectives to improve future security outcomes.

• Develop and execute security testing plans, including penetration testing and vulnerability assessments.
• Collaborate with QA teams to ensure security testing is integrated into the development lifecycle.
• Validate security controls and ensure compliance with security standards.

• Design and implement controls to secure the Auger's software supply chain.
• Build security into CI/CD pipelines.
• Help developers triage and remediate static analysis findings.
• Implement dynamic analysis tooling and automated triage pipelines.

• Degree in Cyber Security, Computer Science, Engineering, IT, or related field.
• 5+ years of experience in a security engineering role.
• Strong understanding of security principles, practices, and technologies.
• Experience with threat modeling, risk assessment, and security testing.
• Knowledge of security standards and frameworks (e.g., ISO 27001, NIST, OWASP).
• Excellent communication and collaboration skills.
• Ability to work independently and as part of a team.