Security Engineer

Security Engineer at Vibes in Chicago, IL (onsite) focused on building, running, and improving controls to protect the cloud environment, applications, workforce, and AI tools/agents.

Responsibilities

• Engineer, operate, and continuously improve controls safeguarding the cloud environment, including network, identity, logging, encryption, and configuration baselines
• Increase security tooling coverage so every active project and account reports into a single view, identifying and closing coverage gaps
• Define guardrails and secure defaults so the safest approach is the easiest path for engineering teams
• Run vulnerability management end to end: ingestion, triage, prioritization by real-world risk, assignment, and closure
• Partner with remediation owners on timelines, unblock fixes, and manage exceptions
• Report on SLA performance, backlog age, and risk trends to security leadership
• Tune detections to improve signal and reduce noise; respond to security events as they arise
• Write, maintain, and rehearse incident response runbooks
• Plan and run tabletop exercises, then turn lessons learned into concrete improvements
• Participate in the security on-call rotation [if applicable]
• Build and improve access grant, review, and removal processes including group-based access, provisioning automation, and periodic access reviews
• Own security steps in joiner, mover, and leaver workflows in collaboration with GRC and IT Support
• Apply least privilege, RBAC, and SSO across people, service accounts, and agent identities
• Review code and infrastructure-as-code changes for security risk prior to production
• Convert recurring findings into reusable patterns, secure templates, and automated checks (for example, in CI/CD)
• Coach engineers on why findings matter and how to fix them
• Use language models and agents to strengthen workforce security, including triage, investigation support, and policy and access workflows
• Support securing an agentic, AI-leaning software development lifecycle, including controls around AI-generated code, agent permissions, and review gates
• Assess security of AI tools and agents (bought or built), including how models and agents reach company systems and data: access scope, data handling, credential management, logging, and prompt-injection and data-exfiltration risk
• Explain risk clearly and credibly to engineers, executives, and auditors with audience-appropriate depth and framing
• Support audits and compliance evidence requests in partnership with GRC (e.g., SOC 2, ISO 27001)

Requirements

• 3+ years of cybersecurity experience at a SaaS company, or equivalent
• Hands-on security engineering experience in a cloud environment; AWS preferred
• Comfort reading code and infrastructure as code (e.g., Terraform/CloudFormation; Python/Go/TypeScript), identifying security issues, and providing constructive review feedback
• Practical experience with vulnerability management and incident response
• Solid understanding of IAM: least privilege, RBAC, SSO, access reviews, and joiner/mover/leaver lifecycle for people, service accounts, and agent identities
• Working knowledge of where AI systems introduce risk and where they reduce work
• Strong written and verbal communication, including the ability to explain risk to any audience

Technologies

• AWS
• Terraform
• CloudFormation
• Python
• Go
• TypeScript
• CI/CD
• SOC 2
• ISO 27001
• SIEM
• EDR
• CSPM
• Vulnerability scanning
• IdP
• CISSP
• NIST CSF
• CIS Benchmarks
• OWASP
• LLM Top 10
• MITRE ATT&CK

Benefits

• Competitive salaries
• Options
• Medical, dental and vision coverage
• Short and long term disability
• Life insurance
• 11 paid holidays
• Flexible vacation
• Commuter benefits
• 401(k) plan and match
• Paid parental leave program

What you’ll bring

Required

• 3+ years of cybersecurity experience at a SaaS company, or equivalent
• Hands-on security engineering experience in a cloud environment; AWS preferred
• Comfort reading code and infrastructure as code (e.g., Terraform/CloudFormation; Python/Go/TypeScript), spotting security issues, and giving constructive review feedback
• Practical experience with vulnerability management and incident response
• Solid understanding of IAM principles: least privilege, RBAC, SSO, access reviews, and joiner/mover/leaver lifecycle for people, service accounts, and agent identities
• Working knowledge of where AI systems introduce risk and where they reduce work
• Strong written and verbal communication, including the ability to explain a risk to any audience

Preferred

• Relevant certification, such as CISSP or an AWS security certification
• Experience with SIEM / EDR / CSPM / vulnerability scanning / IdP tooling
• Experience automating security workflows with scripting or APIs
• Hands-on experience evaluating or building LLM-based applications or agents
• Familiarity with frameworks such as NIST CSF, CIS Benchmarks, OWASP (including the LLM Top 10), or MITRE ATT&CK
• Experience running tabletop exercises or leading incidents

Core values

• Respect, honesty, and integrity for all stakeholders
• Always be learning
• Relentless focus on the customer
• Never be satisfied
• Create value
• Seek accountability and ownership

Location: Chicago, IL (onsite)
Salary: USD 110,000 - 120,000 per yearly