Staff Security Engineer

About the role

Digitalzone is looking for a Staff Security Engineer to set the technical direction for security across its platform. This senior individual‑contributor role combines hands‑on engineering with strategic ownership of the hardest security challenges.

Key responsibilities

• Design and mature a secure SDLC that helps engineers prioritize and remediate findings.
• Lead application security initiatives using deterministic and LLM‑assisted automation to find and fix code vulnerabilities.
• Build supply‑chain security solutions to verify feature and release integrity and mitigate risks from third‑party dependencies.
• Integrate scalable infrastructure and cloud security controls, including container scanning, image signing, admission control, and runtime protection.
• Run vulnerability management programs, coordinate penetration tests, and define key vulnerability metrics.
• Define secure‑by‑design patterns for authentication, authorization, cloud networking, secrets management, and IAM.
• Act as the primary liaison between customers and security vendors to align on findings, remediation priorities, and risk acceptance.

Required profile

• 8+ years of software or security engineering experience with deep hands‑on expertise in application, cloud/infra, and detection & response.
• Proven track record in threat modeling and securing systems handling payments, financial data, or PII.
• Strong engineering fundamentals in AWS security, modern authentication/authorization patterns, and at least one core programming language.
• Working knowledge of PCI DSS, ISO 27001, OWASP, and SOC 2 and ability to operationalize them without slowing delivery.
• Excellent judgment on risk trade‑offs and clear communication with engineers and leadership.

Required skills

• Modern authentication
• Threat modeling
• AWS security
• SOC 2
• PCI DSS
• ISO 27001
• Vulnerability management
• Application security
• Cloud security
• OWASP

What we offer

• Immediate, large‑scale impact on a high‑growth business.
• Top‑of‑the‑market compensation packages.
• Opportunity to work alongside leading security professionals.