Security Engineer- Application & Cloud @Zello

Overview

Zello is a voice-first communication platform that enhances collaboration for desk-less workers. They are seeking a Security Engineer to join their team and contribute to their Security Engineering function.

Key Responsibilities

• Manage interrupt duty including findings triage, access questions, incidents, and customer security assessments.
• Tune the AI security reviewer and triage agents, deciding which calls require human intervention.
• Build the intake pipeline for findings from AI reviewer, bug bounty, pen tests, and audits.
• Lead the Google Cloud hardening project focusing on IAM, org policy, and workload configuration.
• Implement code scanning and supply chain controls in GitHub and CI/CD.
• Review code and designs for authorization, identity, and tenancy issues, pushing necessary fixes.
• Write runbooks and requirements allowing team members to execute security processes independently.

Requirements

• Experience in building and shipping security automation in production.
• Familiarity with LLMs or agents in security applications.
• Ability to analyze application code for exploitable flaws and communicate fixes.
• Experience with security scanning in CI, translating results into actionable fixes.
• Knowledge of GCP security; AWS or Azure experience is acceptable.
• Effective collaborator with engineering teams.
• Ability to adapt quickly and shift between incident and build modes.

Benefits

• Competitive pay and equity options.
• Flexible schedules and time off.
• Sabbatical after every five years of service.
• Work environment with ping-pong table and free snacks.

Location

Remote

How to Apply

To apply, please send your resume and cover letter to recruiting@zello.com.

Deadline

No deadline stated.