Member of Technical Staff, Security

New York, New Yorkfull timeOn Site

Apply on Employer Site

senior

$200k–$250k

H1B: no

Profound Member of Technical Staff, Security at Profound owns technical security controls across platform, cloud infrastructure, and corporate environment. Focuses on detection and response, application security, cloud and IAM, and vulnerability management.

Responsibilities

In your first 90 days, you'll learn our environment, take ownership of [focus area], and work with Infrastructure to close the highest-risk gaps in our AWS environment. You'll also tune our existing CI/CD and cloud scanning so findings are accurate, prioritized, and fixed on schedule.
Over time, you'll take on broader responsibility:
Run and mature our vulnerability management program across infrastructure, applications, and dependencies, including triage, severity-based remediation targets, and exception handling
Triage and respond to findings from automated tooling, bug bounty reports, and third-party assessments
Enforce least-privilege access and run regular access reviews across environments
Work with Infrastructure to improve detection and monitoring using log aggregation and SIEM tooling
Provide engineering evidence (scans, access reviews, hardening) that supports continuous SOC 2 compliance, working with our GRC team
Support customer security reviews by answering technical questions from enterprise buyers
Lead post-incident reviews and drive systemic fixes
Contribute to risk assessments and the risk register, and help set priorities

Qualification

5+ years in security engineeringBackground in penetration testingRelevant certifications (CISSP

Required

5+ years in security engineering, including time in high-growth SaaS or infrastructure-heavy environments
Experience supporting or maintaining a SOC 2 program
Strong knowledge of AWS security services and cloud security architecture (IAM, VPC, CloudTrail, GuardDuty, Security Hub)
Solid understanding of identity and authentication protocols (OAuth, SAML, OIDC)
Scripting skills in Python or Bash to automate security workflows
Experience running vulnerability management and security scanning (SAST, DAST, SCA, container scanning) in CI/CD workflows
Infrastructure-as-code security experience (Terraform, CloudFormation)
Familiarity with network security fundamentals (firewalls, DNS, VPNs, segmentation, traffic analysis)
Background in penetration testing, application security assessments, or CTF competitions
Familiarity with data infrastructure security for systems like ClickHouse or PostgreSQL
Experience with data processing compliance in analytics-heavy environments
Relevant certifications (CISSP, CCSP, AWS Security Specialty, or similar)

Benefits

Equity/RSU

Company

Profound

View company page

Source: ashby

Active within the past hour

More roles at Profound

Member of Technical Staff, Program Manager

New York, New York

GTM, Compensation Manager

New York, New York

GTM, Compensation Manager

Remote

Strategic Operations

New York, New York

Boost Your Interview Chances

Improve Resume Match Score

Free

Your Score

9.0

Strong Applicant

Must-Have Skills for This Role

AWSIAMVPCCI/CDcloud scanninglog aggregation

Optimize my Resume

Apply Faster with Autofill

Free

Save your profile once. LumiJobs pre-fills the employer's application form so you stop re-typing the same answers on every site.

Apply With Autofill

Or skip LumiJobs's tools and submit directly on the employer's career site.

Apply on Employer Site

Member of Technical Staff, Security at Profound · LumiJobs