Staff Security Engineer

Staff Security Engineer LocationRemoteEmployment TypeFull timeLocation TypeRemoteDepartmentEngineeringCompensation$220K – $240K • Offers EquityAt Assured, we recognize the uniqueness of individual needs and offer multiple distinct compensation packages upon extending a job offer. Our flexible options cater to your preference for cash, equity, or a balance of both. The cash compensation range for this position is outlined below. We also offer medical, dental, vision, 401(k) with guaranteed matching, and a flexible time off policy. Please note that compensation may fall outside of this range based on factors such as qualifications, skills, competencies, and experience, and is subject to change.Assured is on a mission to modernize insurance. Claims processing (i.e. should we pay this claim?), while often overlooked, is the foundation of the entire industry. It’s currently highly manual, involving phone calls, faxes, and gut instinct, costing tens of billions of dollars a year. We can do better.At Assured, we provide large insurers with the software solutions they need to win in a modern, technology-driven world. From self-service claim-filing software to backend fraud detection, we’re the engine that powers claims processing for some of the largest insurers in the world.The challenges we face are deep and diverse, from creating digital experiences that provide comfort and clarity to claimants at their most stressed and vulnerable to orchestrating large-scale ML-driven decision-making on billions of dollars of claims payments, life at Assured is dynamic, collaborative, and rewarding.We’re looking for a Staff Security Engineer to help scale and mature security across our platform, infrastructure, and development workflows. This role will partner closely with engineering, infrastructure, and product teams to embed security into how we build and operate software.You’ll combine deep technical expertise with strategic thinking—identifying risk, designing scalable security solutions, and building programs that improve both security posture and engineering efficiency.You Will…🛡️ Lead security architecture and design reviews across applications, infrastructure, and integrations to ensure secure patterns are embedded early in the development lifecycle.🔎 Conduct and coordinate penetration testing, threat modeling, and security reviews for critical services, new features, and third-party integrations.⚙️ Design and implement security automation within CI/CD pipelines to ensure secure coding practices and infrastructure policies are enforced at scale.☁️ Partner with infrastructure and DevOps teams to secure cloud platforms (AWS) and improve identity, network, and workload security.📊 Build security observability and detection capabilities, including security data pipelines, SIEM integrations, and threat intelligence signals.🧠 Think like an attacker—identify systemic weaknesses and design controls that protect against entire classes of attacks, not just individual vulnerabilities.🧑‍💻 Work closely with developers to improve security practices through secure architecture guidance, code review support, and developer enablement.🚨 Lead incident response investigations and help build processes for identifying, analyzing, and mitigating security incidents.🐞 Own and evolve the bug bounty program, including triage, response processes, and improvements to vulnerability management workflows.📚 Develop security standards, playbooks, and training programs that make security practices easier for engineering teams to adopt.📈 Help define the security roadmap, identifying initiatives that improve both risk posture and operational efficiency.You Have…🔐 Deep understanding of application security, cloud security, and modern threat landscapes, including common vulnerabilities and attack techniques (OWASP Top 10, MITRE ATT&CK, etc.).💻 Strong software engineering background with experience writing production-grade code or automation (Python, Typescript, or...