5-7 years of hands-on experience in cloud, infrastructure, or application security.
Deep understanding of Kubernetes, IAM, networking, and cloud security; GCP experience preferred.
Strong TypeScript development skills for building security tooling and automation.
Experience with security reviews, threat modeling, penetration testing, and vulnerability remediation.
Ability to work independently while collaborating with engineering teams.
Responsibilities
Design and implement security controls for workload identity and least-privilege IAM.
Secure AI agents and code execution environments through sandboxing.
Conduct security reviews of services and systems, collaborating with engineers for fixes.
Perform internal penetration tests to identify vulnerabilities.
Build security monitoring and detection rules across infrastructure and applications.
Integrate security into development workflows and CI/CD processes.
Support incident investigations and address security weaknesses.
Benefits
Remote work flexibility.
Opportunity to work with cutting-edge technology in a fast-paced environment.
Collaborative culture with engineering teams.
Focus on security in a data-sensitive industry.
Full Job Description
What You're Applying For
Triple Whale is a data and AI platform serving thousands of ecommerce brands. We handle sensitive merchant data and credentials, making security core to our product.
As a Senior Security Engineer, you'll design and build security controls across our cloud infrastructure, applications, and AI systems. You'll work alongside the Infrastructure and engineering teams to turn security requirements into practical protections that support fast development.
Stack: GCP, GKE, TypeScript, Pulumi, Cloud SQL, MongoDB, ClickHouse, and more. What You'll Do
Design and implement controls for workload identity, least-privilege IAM, secrets management, network isolation, and egress.
Secure AI agents and code execution environments through sandboxing and clear access boundaries.
Conduct security reviews of services, systems, and architecture, and work with engineers to implement fixes.
Perform internal penetration tests to identify vulnerabilities and validate security controls.
Build security monitoring, detection rules, and alerting across our infrastructure and applications.
Build security into development workflows, CI/CD, infrastructure as code, and software dependencies.
Support incident investigations and address underlying security weaknesses.
What You'll Bring
Strong hands-on experience in cloud, infrastructure, or application security.
Deep understanding of Kubernetes, IAM, networking, and cloud security; GCP experience preferred.
Strong TypeScript development skills and experience building security tooling and automation.
Experience with security reviews, threat modeling, penetration testing, and vulnerability remediation.
Practical judgment and the ability to work independently alongside engineering teams.
