SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 160,000 - 200,000 / annual
VTS is seeking an experienced Senior Software Engineer to strengthen security processes, workflows, and posture across applications, cloud infrastructure, and platform. This role focuses on proactive vulnerability detection and response rather than reactive patching, with emphasis on AI-augmented defense capabilities.
Key Responsibilities:
- Own and engineer detection, investigation, and response capabilities protecting global platforms
- Design and implement SAST/DAST programs end-to-end, integrating static and dynamic analysis into CI/CD pipelines to catch vulnerabilities before merge
- Identify and build AI/LLM-driven agents that close gaps between exposure and detection, layering LLM inference across dependency analysis, code review, and runtime behavior
- Own security incidents end-to-end from initial signal through root-cause analysis, remediation, and post-mortems
- Read and validate code critically, particularly in systems languages, to verify findings at the source
- Lead vulnerability management and threat modeling across internal and external environments, prioritizing by exploitability and business impact
- Partner with legal, IT, and leadership to maintain compliance posture (SOC 2 Type II, ISO 27001) and translate audit requirements into practical engineering
- Mentor engineers and influence cross-functional teams on secure coding and threat modeling
- Serve as escalation point for complex security incidents, conducting deep-dive post-mortems
The role bridges code-level investigation and enterprise-wide risk reduction, ensuring software supply chain, cloud infrastructure, and applications are resilient by design. You will act as a force multiplier, staying current with security research and industry trends rather than relying solely on vendor solutions.
Requirements:
- 8+ years of experience in Security Engineering, AppSec, Vulnerability Research, or Incident Response
- At least 2 years in a Senior-level capacity driving cross-team initiatives
- Fluency in at least one systems language (C, C++, Rust, Go, or ASM) for critical code reading and analysis
- Hands-on experience with secrets management (Vault, AWS KMS/Secrets Manager) and secure API design (authN/authZ, input validation, rate limiting)
- Knowledge of system hardening standards (CIS Benchmarks, SELinux/AppArmor)
- Comfort operating within SOC 2, ISO 27001, or similar compliance frameworks
- Passion for AI/ML intersection with security; understanding of LLMs as non-deterministic programs
- Investigator's mindset with relentless curiosity and ability to follow problems from exposure to closure
- Autonomous operator who identifies gaps and raises priorities without waiting for assignment
- Ability to work from New York office four days per week
