Senior Staff Security Engineer

Description

The company is a data and AI trust business with more than 550,000 customers worldwide, headquartered in Seattle with offices in over 30 countries. It leads in data resilience and data security posture management.

The team builds and runs the security platform for a multi-cloud SaaS product on Azure and AWS, used by regulated industries. The role sits in the Platform and AI group and works with the other technical leads on three areas that set how much risk each release carries: software supply chain, secure AI sandboxes and vulnerability management.

You will work with Product Engineering, SRE, Corporate Technology and Compliance. Success is measured by mechanisms you deliver, not by advice you give.

Responsibilities

• Work with the other technical leads to strengthen software supply chain security across the company's SaaS platforms.
• Design secure patterns for AI use on the SaaS platforms.
• Work with the other technical leads to run vulnerability management as an engineered system.
• Ship security controls written in Terraform.
• Build automation that cuts operational toil.
• Raise the engineering standard across the team.
• Take part in an on-call rotation.

Requirements

• At least 8 years in security and engineering, with recent depth in cloud platform security and hands-on delivery.
• Production Terraform at scale, including reusable modules that other teams consume, and the judgment to decide when a control belongs in code instead of a runbook.
• Working knowledge of AI and LLM security, including prompt injection, indirect prompt attacks, abuse of agent tool boundaries and model exfiltration.
• Deep Azure experience covering Entra ID and RBAC, Key Vault and key handling, network egress, workload and managed identity, policy enforcement, and the gaps platform defaults leave open.
• Practical software supply chain security: dependency risk, build pipeline integrity, provenance and signing, and the judgment to pick controls worth the friction they add for developers.
• Experience owning vulnerability management as an engineer: ingestion, deduplication, routing, SLA design and measurable reduction of risk, not just reporting.
• Experience designing isolation boundaries for untrusted code execution across network, identity and data, backed by a threat model you can defend.
• Python or Go skills good enough to build and maintain systems, not only configure vendor products.
• A record of setting technical direction that others followed, and of shipping production code you can show. This is a hands-on building role.
• Familiarity with regulated-industry expectations such as SOC 2 Type 2, ISO 27001, FedRAMP and HITRUST, including what auditors accept as evidence.

Conditions

The role is based in the Czech Republic and includes an on-call rotation.

Equal opportunity employer: no discrimination on the basis of race, colour, religion, gender, age, national origin, citizenship, disability, veteran status or any other protected classification.

Information you provide is kept confidential.

Benefits

• 25 vacation days, 4 sick days, 21 paid medical leave days, 4 extra global VeeaMe Days for self-care, and 24 paid volunteer hours a year through Veeam Cares.
• Premium private medical insurance for employees and dependents.
• Daily meal vouchers for restaurants and groceries worth 180 CZK per working day.
• Flexible cafeteria platform with thousands of lifestyle options.
• Multisport Card for gym and wellness, with family add-ons.
• Annual public transport reimbursement up to a set limit.
• Corporate mobile plan with an optional family tariff.
• Learning through on-demand libraries (LinkedIn Learning, O'Reilly), mentoring, workshops and events such as the annual Global Day of Learning.