STAFF, SOFTWARE ENGINEER, INFORMATION SECURITY

About The Team The Security Partners Engineering team, part of the Information Security organization, builds innovative platforms that simplify, automate, and scale security and compliance processes across the enterprise.

Our mission is to transform traditional, manual security assessments into intelligent, automated, and risk-driven workflows. We develop platforms that integrate security controls, policy compliance, and risk assessments directly into software development and deployment processes, enabling engineering teams to deliver solutions faster and more securely.

The team focuses on building automated security assessment engines, policy-driven orchestration platforms, intelligent workflow automation, and integrations with enterprise security tools and diverse data sources. We are driving the adoption of AI and agentic technologies to enable self-service security capabilities, continuous compliance validation, automated evidence collection, and minimal-touch security approvals.

We are looking for a highly motivated Staff Software Engineer who brings strong full-stack development expertise, architectural depth, and an AI-first engineering mindset to help build the next generation of enterprise security automation platforms.

What You’ll Do

• Lead the architecture, design, and hands-on development of scalable, cloud-native, full-stack applications using Java, Spring Boot, React, TypeScript/JavaScript, and Python.
• Build LLM APIs, AI agents, or generative AI capabilities into enterprise applications and automation workflows.
• Design and build intelligent security automation platforms that streamline risk assessments, security control validation, compliance attestation, and evidence collection.
• Develop orchestration engines and automated workflows that integrate security assessments and policy validation into enterprise application development and deployment lifecycles.
• Build API-driven integrations with enterprise platforms, security tools, cloud services, asset inventories, vulnerability management systems, and other internal and external data sources.
• Design and implement data ingestion, transformation, normalization, and processing pipelines to aggregate security and compliance information from heterogeneous systems.
• Develop reusable microservices, RESTful APIs, event-driven architectures, and integration frameworks supporting distributed enterprise applications.
• Build intuitive web applications, self-service portals, dashboards, and workflow interfaces to simplify security operations and improve the developer experience.
• Develop policy-as-code capabilities, rules engines, and automated decision workflows to enable consistent, risk-based security evaluations and approvals.
• Integrate security and compliance checks into developer platforms, CI/CD pipelines, and standardized engineering workflows to enable secure-by-default development.
• Explore and implement AI-powered capabilities, including LLM integration, agentic workflows, intelligent recommendations, automated analysis, and human-in-the-loop decision support.
• Champion AI-assisted development and Vibe Coding practices, leveraging tools such as GitHub Copilot, Cursor, Windsurf, and other AI coding assistants for code generation, prototyping, testing, debugging, refactoring, and documentation.
• Apply effective prompt engineering and AI-driven development techniques while ensuring generated code meets security, reliability, performance, and maintainability standards.
• Design and deploy containerized applications using Docker, Kubernetes, and cloud platforms such as GCP and Azure.
• Build and maintain automated CI/CD pipelines, infrastructure automation, and DevSecOps practices, including security scanning and automated testing.
• Ma
• Establish observability, logging, monitoring, and operational readiness for production services, ensuring reliability and efficient troubleshooting.
• Drive technical architecture decisions, conduct design and code reviews, and establish reusable engineering patterns and best practices.
• Mentor engineers, promote AI-first development practices, and improve engineering productivity through automation and continuous improvement.
• Collaborate with security architects, product managers, platform engineering teams, and business stakeholders to translate complex security requirements into scalable technical solutions.
• Own end-to-end engineering delivery, from requirements and…