RemoteLeaf Logo
Log in Sign up

Head of Security

1 month ago
United Kingdom, Germany, Netherlands, Poland, Spain
Full-time
Executive
Security Engineer
DevOps and Infrastructure
AWS DevSecOps Docker GitHub Network Security Notion
Apply Now
LocalStack

LocalStack

LocalStack provides a local development and testing environment that emulates over 100 AWS services, enabling developers to build and test cloud applications offline with high fidelity and faster feedback loops, ultimately streamlining the development ...

Internet Software & Services
11-50
Founded 2021
View All Jobs 3

Description

  • Ensure a robust security posture across product components, including LocalStack emulators, LocalStack Cloud platform, and the data warehouse.
  • Lead incident monitoring, intrusion detection, and vulnerability management initiatives.
  • Define and implement regular security auditing procedures across systems, access controls, and configurations.
  • Design and deliver a sustainable, scalable vendor risk assessment process (via tooling, delegation, or automation) and complete vendor risk assessments to support the sales process.
  • Ensure secure configurations and permission models in collaboration with engineering teams.
  • Identify gaps between claimed and actual compliance and propose and lead corrective actions to close them.
  • Own documentation of security controls, configurations, and policies and keep documentation accessible to stakeholders.
  • Engage with internal stakeholders to evaluate threats, attack vectors, and security trade-offs.
  • Generate and distribute internal audit and compliance reports at regular intervals.

Requirements

  • 7+ years in a security engineering or security compliance role.
  • Experience leading vendor risk assessments and building compliance frameworks from the ground up.
  • Strong background in API design and build and experience with DevSecOps and incident response.
  • Expert knowledge of threat modelling and vulnerability management.
  • Practical experience with intrusion detection, network security, and Linux/Unix OS hardening tools.
  • Practical cloud security experience (AWS preferred).
  • Good knowledge of common standards such as SOC 2, ISO 27001, and GDPR (formal certification not required).
  • Strong documentation and communication skills with the ability to explain complex topics to non-experts.
  • Good understanding of US and EU security and compliance expectations.
  • Prior engineering experience strongly preferred and a pragmatic, risk-based approach to decision-making.

Benefits

  • Fully remote role (distributed global team).
  • Competitive salary.
  • Annual company retreat.
  • Two extra company-wide holidays.
  • Friendly and inclusive workplace culture with community guilds and online company events.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Databricks

Head of Corporate Engineering

Databricks 1K-5K IT Services

Databricks is hiring a Head of Corporate Engineering to lead global enterprise engineering and operations, building and scaling secure cloud infrastructure, identity and access, endpoints, collaboration and engineering tools to enable developer velocity and enterprise compliance.

United States Full-time Lead Infrastructure Engineer Security Engineer
$265k-$364k
Agile AWS Azure Confluence GCP GitHub JIRA macOS
1 month ago
ClickHouse

Incident Response Security Engineer

ClickHouse 51-250 IT Services

Security practitioner role at ClickHouse focused on scaling incident detection and response capabilities, driving adoption of security processes and tooling, and protecting the company’s cloud and product infrastructure for customer-facing services.

United Kingdom Full-time Senior Security Engineer
AWS Azure ClickHouse GCP Penetration Testing Python SIEM
1 month ago
Samsara

Senior Security Engineer - Vulnerability Management

Samsara 1K-5K IT Services

Senior Security Engineer at Samsara responsible for deploying, operating, and improving the company’s Vulnerability Management program to reduce software vulnerabilities and protect customer-facing infrastructure.

United States Full-time Senior Security Engineer
$158k-$238k
AWS CI/CD DevSecOps Go Python Serverless Terraform
1 month ago
ARETUM

Junior DevSecOps Engineer - Contingent

ARETUM Construction & Engineering

Junior DevSecOps Engineer at Aretum supporting a federal client to operate, automate, and secure cloud-based systems and CI/CD pipelines to enable reliable, compliant deployments.

United States Full-time Junior DevOps Engineer Security Engineer
Agile Ansible AWS AWS CDK Azure Chef CI/CD Docker Encryption Git GitLab CI Grafana JIRA Kubernetes Linux LXC Prometheus Puppet SaltStack Scrum Serverless Terraform
1 month ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers