Senior Security Engineer

The posting, as Aptible wrote it

ABOUT APTIBLE

Large language models are transforming software engineering — developers can now go from idea to code faster than ever. But that just shifts complexity downstream: deployment, observability, cost, security, reliability — all of that has to scale too, and LLMs don't yet solve the problem.

That's where Aptible comes in. Since 2014, our cloud delivery platform has been automating security, compliance and reliability for engineering teams whose apps handle the most sensitive data, in the most highly regulated industries.

The need for a platform like Aptible has never been greater. If you're passionate about cloud infrastructure and ensuring DevOps evolves to meet the pressure of AI-assisted development — and you're excited to join a small and highly talented team — we’d love to hear from you.

NEW! Aptible is part of Opti9 Technologies, a cloud solutions provider specializing in managed cloud, security, disaster recovery, and compliance. Joining forces with Opti9 gives Aptible the resources to invest more aggressively in the platform — expanding what we can deliver to the engineering teams who depend on it.

OUR COMMITMENT TO DIVERSITY AND INCLUSION

We see great value in bringing together a team with different perspectives, educational backgrounds, and life experiences, and we prioritize diversity within our team. We encourage people from underrepresented backgrounds to apply.

ABOUT THIS ROLE

OVERVIEW

In this role, you'll lead on projects that improve defense and hardening for a platform that regulated companies build their businesses on. This is a hand-on engineering role where you'll architect and build secure-by-default infrastructure, run our vulnerability management and pentesting programs, and lead incident response when things go wrong.

This role reports to the Chief Information Security Officer (CISO), but will work day-to-day as a member of our Platform Engineering team, and in close collaboration all engineers at Aptible.

WHAT YOU'LL DO

Engineering

• Architect and ship projects that make a meaningful improvements to our security posture and the security posture of our customers. These improvements span the full stack, from AWS and Docker to CloudFormation, Terraform, Ansible, Ruby, Go, Python, and TypeScript.
• Leverage cutting-edge AI models and third-party tools, or build your own from scratch, to level up our security game.
• Own our vulnerability management and pentesting programs end to end, finding the best ways to automate vulnerability detection and mitigation.
• Join the on-call rotation as a first responder for security events, and ensure we mitigate with lasting fixes so the same issue never wakes anyone up twice.

WHAT WE'RE LOOKING FOR

General Experience

• 5+ years of experience in engineering, with a track record of owning security-critical systems in production.
• Hands on experience working on projects related to security and/or compliance. Experience with HITRUST

[…]
e clear eyes about its negative impacts on society, the environment, engineering culture, and more.

But we engage with it for two reasons

• Because our customers do. And to best serve them, we need expertise in AI use, AI risk, AI development, and more.
• Because sometimes AI is the right tool for the job, and sometimes it accelerates our work. And at heart, we are pragmatists.

Aptible is a good fit if you're someone who can hold multiple ideas at once about AI — the utility and the risk, the potential and the cost, enthusiasm and skepticism. If you're categorically opposed to working with it in any form or an unbridled enthusiast, this probably isn't the right fit.

AI USAGE IN THE INTERVIEW PROCESS

At Aptible, AI is part of how we work every day. We treat it like any other development tool — powerful, expected, and entirely the responsibility of the person using it. Use it with discernment, knowing that you still own the results.

Here's what we expect from you

• Your resume — Don't submit AI-generated resumes. They will be discarded. Concise and real wins with us. (Why? We review a high volume of applications and aren't using AI for application review. Our human reviewers can't parse through templated, bloated submissions, and resumes highly tailored to the keywords of our JDs don't hold weight for our reviewers)
• Live conversations — Don't use real-time AI to generate answers that you read off to us. It's obvious, and we'll end the interview. Honest and real wins with us. (Why? These are human interactions. We're evaluating you — how you think, how you communicate, how you engage)
• Technical topics/work — Use any tools you normally would, including AI agents. But be honest about what you used, be discerning about what AI outputs, and be ready to explain your thinking. AI output refined by human judgment wins with us. (Why? We want to see what real work looks like. And real work includes shaping what comes from AI, not just accepting it as-is)