Backed by Techstars.
About the role
This role works in partnership with Indico’s CISO and CTO. The CISO owns security strategy, formal risk acceptance, policy approval, and executive accountability. The Senior Security Engineer turns that direction into practical technical controls, security reviews, operating processes, and cross-functional execution.
What they're looking for
- Improve Indico’s technical security posture across AWS, Kubernetes, CI/CD, product security, internal systems, and incident response
- Partner with the CISO and CTO to turn security priorities into practical technical controls, standards, reviews, and operating processes
- Review Engineering work against security standards, with authority to request changes where needed
- Partner with Engineering on AWS security controls, including IAM, networking, account structure, logging, encryption, key management, backups, production access, and customer-dedicated environments
- Review and improve Kubernetes and container security controls, including workload identity, RBAC, network boundaries, image security, runtime monitoring, and deployment patterns
- Define and improve secure CI/CD patterns, including GitHub permissions, branch protections, privileged workflows, secrets handling, release controls, and deployment access
More about this role
Senior Cybersecurity Engineer
Experience Required: 6–10 years
About the Position
The Senior Cybersecurity Engineer is a hands-on technical security role responsible for improving Indico’s security posture across AWS, Kubernetes, CI/CD, product security, internal systems, and incident response.
This role works in partnership with Indico’s CISO and CTO. The CISO owns security strategy, formal risk acceptance, policy approval, and executive accountability. The Senior Security Engineer turns that direction into practical technical controls, security reviews, operating processes, and cross-functional execution.
This role acts as a security check and balance for Engineering and Platform. You will review technical work against defined security expectations, request changes where needed, and help teams build secure systems without creating unnecessary friction.
Security does not own every security task. Engineering and Platform own implementation and remediation for the systems they build and run, including CVEs, infrastructure changes, CI/CD permissions, committed-secret remediation, and production access implementation. IT/Ops, People Ops, and system owners own day-to-day access...
Browse similar: AI jobs · AI startup jobs · Startup jobs · Remote jobs