Security Engineer- Application & Cloud
Zello, Austin, Texas
What you will do
- Take your turn on interrupt duty (findings triage, access questions, incidents, and customer security assessments), then swap to protected build time.
- Tune the AI security reviewer and triage agents, and decide which calls stay with a human owner.
- Build the intake pipeline that routes findings from the AI reviewer, bug bounty, pen tests, and audits to the teams that own the code, with SLA clocks per severity.
- Lead the Google Cloud hardening project across IAM, org policy, and workload configuration.
- Choose and roll out code scanning and supply chain controls in GitHub and CI/CD, and make sure engineers can act on what the scanners find.
- Review code and designs that touch authorization, identity, and tenancy, and push fixes through Platform, Web, and Backend teams.
- Write the runbooks and requirements that let anyone on the team run a security process without you.
What you need
- You've built and shipped security automation in code, and you can walk us through something you wrote that still runs in production.