SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
airSlate is a global SaaS company providing no-code workflow automation, electronic signature, and document management solutions serving hundreds of millions of users and over one million customers worldwide. The Security Engineering team protects user data and platform stability by working across product, engineering, and operations to reduce security risks from design through production.
As Senior Security Engineer (Cloud & AppSec), you will be a core member of a five-person security team responsible for securing airSlate's cloud infrastructure and products. You will work directly with product and engineering teams to build secure products, identify and remediate risks early, and respond to security incidents.
Key responsibilities include:
- Securing AWS and GCP environments through IAM configuration, least-privilege access, workload identities, network segmentation, encryption, and secrets management
- Identifying and remediating cloud misconfigurations and security risks
- Establishing security logging, monitoring, and investigating suspicious activity
- Conducting security testing of web, mobile, and network applications
- Managing and improving security scanning tools (SAST, DAST, SCA) and integrating them into CI/CD pipelines
- Participating in architecture reviews, threat modeling sessions, and risk assessments to embed security early
- Communicating security findings clearly and collaborating with engineers to resolve issues
- Handling security incidents across application, infrastructure, and user domains—investigating, triaging, containing, and writing post-mortems
- Preparing for SOC 2 and CASA audits and external security assessments
- Configuring and monitoring CDN infrastructure
- Collaborating with a small, experienced team on complex security problems
Requirements:
- 4+ years of professional experience in information security, application security, or related field
- Hands-on experience securing AWS and/or GCP (required)
- Practical experience with SAST, DAST, and SCA tools, including selection, setup, and CI/CD integration
- Experience in security testing of web, mobile, or network applications
- Experience in incident response, from investigation through post-mortem
- Strong knowledge of secure development practices across the SDLC, including threat modeling
- Working knowledge of Bash, Python, Go, or Terraform
- Clear communication skills and ability to explain risks effectively to technical teams
- English at B2 level or higher (written and spoken)
Preferred qualifications:
- Experience preparing for compliance audits (SOC 2, CASA, PCI DSS, NIST CSF)
- Previous experience as a DevOps engineer or developer
