Later Senior Security Engineer at Later to strengthen company-wide security posture through engineering and collaboration. Focus on application security, cloud security, compliance, and vulnerability management.
Responsibilities
Company-Wide Security Strategy & Compliance
Assess and continuously improve Later's overall security posture across applications, infrastructure, cloud environments, corporate systems, vendor tooling, and business workflows.
Define and implement scalable security standards, best practices, and guardrails that support SOC 2 readiness through practical, automated, and auditable solutions.
Partner with Engineering, Infrastructure, IT, Product, Legal, People, Finance, and business leaders to align security priorities with company goals, risk reduction, and delivery timelines.
Translate SOC 2 and related compliance requirements into sustainable technical and operational controls, procedures, and evidence collection practices.
Identify security gaps across the company, prioritize remediation efforts, and help teams make pragmatic, risk-based decisions.
Support company-wide security awareness, secure operating practices, and adoption of security controls across business teams.
Technical Execution
Build and maintain internal security tools, automation, and services that support secure development, compliance workflows, vulnerability management, corporate security operations, and operational visibility.
Design and implement security controls within CI/CD pipelines, including secure build and deploy patterns, security scanning, dependency management, container scanning, and secret management.
Support application security efforts, including secure design reviews, threat modeling, code review guidance, API security, microservices security patterns, and remediation planning.
Improve cloud infrastructure and corporate systems security through hardening, monitoring, configuration review, Infrastructure-as-Code security scanning, access reviews, and secure operational patterns.
