Hands-on Staff Security Engineer to build and operate DevSecOps capabilities: automate security controls, harden AWS/cloud and CI/CD, improve supply-chain security, build detection/response tooling, partner with engineering for secure design, and lead incident response and compliance automation.
About Nue.io
Responsibilities:
What You’ll Bring:
What We Offer:
Nue is the AI-powered revenue architecture platform that unifies CPQ, billing, and revenue lifecycle management into a single system. It enables companies to simplify complex pricing, automate monetization, and gain full control over how they generate and scale revenue. Working with customers such as OpenAI, Chilipiper, Glean, HootSuite, and Mews. Nue helps sales, operations, and finance teams gain revenue acceleration, operational efficiency and revenue controls at speed and scale.
What You’ll Do:We're looking for a highly motivated Staff Security Engineer to join our DevSecOps team and help build and operate the security foundation of Nue's platform and engineering systems.
This is not a policy or analyst role. We want someone who is hands-on, writes code, automates security controls, improves infrastructure, hardens systems, and helps engineers ship safely at speed.
You'll work at the intersection of software engineering, cloud infrastructure, security operations, and developer enablement. You'll partner closely with Product Engineering, Platform, and DevSecOps teams to reduce real risk through practical engineering.
If you're passionate about securing cloud-native systems, building internal tooling, improving detection and response, and making security a force multiplier for engineering, this is the role for you.
- Drive secure-by-default patterns across the organization through reusable libraries, templates, guardrails, and paved-road workflows, improving security posture across cloud infrastructure, the application stack, and developer workflows.
- Lead practical threat modeling for new product capabilities, platform changes, and high-risk workflows, translating findings into clear engineering actions.
- Help define the security tooling strategy across application security, cloud security, detection, and developer workflows, evaluating and integrating tools that meaningfully reduce risk without slowing delivery.
- Improve software supply chain security across build systems, dependencies, container images, secrets, and deployment processes.
- Design, build, and operate security automation and production-quality tooling for identity and access management, secrets management, vulnerability management, and policy enforcement.
- Harden AWS environments, containerized workloads, and CI/CD pipelines, using AI-assisted tooling to accelerate work where it genuinely helps.
- Build and maintain detection and alerting for meaningful security events across endpoints, cloud infrastructure, application logs, audit trails, and identity systems.
- Partner with engineering teams to review architecture, application design, infrastructure changes, and operational patterns with a focus on reducing exploitable risk.
- Support compliance and audit needs through engineering-driven controls, evidence automation, logging, and repeatable operational practices.
- Own hands-on incident response, including triage, containment, root cause analysis, remediation, and post-incident follow-through.
- Participate in on-call rotations for high-severity security and platform incidents and build and test response procedures for scenarios such as credential compromise, privilege escalation, and exposed secrets.
- Bachelor's degree in Computer Science, Engineering, or equivalent practical experience.
- 8+ years of experience across software engineering, infrastructure engineering, platform engineering, SRE, DevOps, security engineering, or related roles in production SaaS environments.
- 3+ years of hands-on experience in security engineering, platform security, cloud security, or related security-focused roles.
- Strong hands-on experience securing cloud-native environments on AWS.
- Proven ability to write code for automation, integrations, internal tooling, and operational workflows using languages such as Python, Go, JavaScript, or Bash.
- Experience operating in a DevSecOps or platform-adjacent model where security is embedded into delivery pipelines and engineering workflows.
- Strong experience with identity and access management, secrets handling, key management, logging, auditability, and least-privilege design.
- Experience building or operating security controls for CI/CD, infrastructure as code, containerized systems, and developer platforms.
- Practical experience with security monitoring, detection engineering, alert tuning, and incident response.
- Ability to assess real-world risk and prioritize pragmatic fixes over theoretical perfection.
- Experience partnering with engineering teams to improve security architecture, code patterns, infrastructure posture, and operational readiness.
- Demonstrated ability to use AI-assisted development tools to accelerate investigations, automate repetitive work, and improve engineering effectiveness while maintaining strong judgment.
- Comfortable working in a fast-paced startup environment with a small, high-impact team.
- Excellent communication and collaboration skills, able to explain trade-offs clearly and drive consensus without becoming a bottleneck.
- Competitive compensation and benefits that reward your talent and impact.
- Comprehensive health, vision, dental, and life insurance
- A front-row seat in the Silicon Valley tech ecosystem, where you’ll work on cutting-edge challenges shaping the future of SaaS, finance, and payments.
- The opportunity to build truly groundbreaking products — your work won’t just support the business; it will influence how companies around the world monetize and grow.
- A high-energy, collaborative culture where smart, supportive teammates push each other to learn fast, think boldly, and do the best work of their careers.
- Room to grow, lead, and make your mark in a fast-scaling company that values creativity, ownership, and ambition.
Nue.IO is an equal opportunity employer and welcome people of diverse backgrounds, perspectives, and skills.
We will work with applicants to provide accommodations at any stage of the hiring process.
If you require accommodations during the interview process, please email your Talent Partner, and we will work with you to meet your needs.
Similar Jobs
Blockchain • Fintech • Mobile • Payments • Software • Financial Services
Build and deploy agentic and generative AI copilot and autopilot systems for risk and compliance automation. Own end-to-end ML systems, including data integrations, prompt tuning, orchestration, evaluation, productionization, monitoring, and transformer-based model development. Collaborate with product, engineering, platform, and operations teams to improve fraud detection and analyst productivity. Drive strategic roadmaps and cross-functional programs with significant business impact.
Top Skills:
Amazon Web Services (Aws)Apache AirflowClaude CodeCodexGoogle Cloud Platform (Gcp)Large Language Models (Llms)Natural Language Processing (Nlp)OpenclawPythonPyTorchSnowflake
Blockchain • Fintech • Mobile • Payments • Software • Financial Services
Build and own foundational Android platform infrastructure, shared libraries, frameworks, architecture, observability, performance tooling, and developer experience systems. Lead AI-native engineering practices, evaluate AI development tools, drive cross-organizational technical initiatives, mentor engineers, and establish scalable Android standards. Collaborate across mobile, web, backend, product, design, and leadership teams to improve engineering velocity and customer experiences.
Top Skills:
AndroidArtifactoryBuildkiteClaude CodeCodexGooseGradleJetpack ComposeKochikuKotlinKotlin MultiplatformMoleculePaparazziSqldelightStructured ConcurrencyWireWorkmanager
.png){kind=logo}
AdTech • Cloud • Digital Media • Information Technology • News + Entertainment • App development
Develop and oversee high-quality datasets and data pipelines for production machine learning. Collaborate with ML engineers, product teams, TPMs, engineering teams, and annotation teams to define training requirements, translate product goals into data specifications, curate and validate behavioral datasets, and ensure data integrity, accuracy, representativeness, and reliability.
Top Skills:
ConfluenceExperiment Tracking FrameworksGitJIRAPythonSlackUnix ShellUser Behavior Data Visualization Tools
What you need to know about the Los Angeles Tech Scene
Los Angeles is a global leader in entertainment, so it’s no surprise that many of the biggest players in streaming, digital media and game development call the city home. But the city boasts plenty of non-entertainment innovation as well, with tech companies spanning verticals like AI, fintech, e-commerce and biotech. With major universities like Caltech, UCLA, USC and the nearby UC Irvine, the city has a steady supply of top-flight tech and engineering talent — not counting the graduates flocking to Los Angeles from across the world to enjoy its beaches, culture and year-round temperate climate.
Key Facts About Los Angeles Tech
- Number of Tech Workers: 375,800; 5.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Snap, Netflix, SpaceX, Disney, Google
- Key Industries: Artificial intelligence, adtech, media, software, game development
- Funding Landscape: $11.6 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Strong Ventures, Fifth Wall, Upfront Ventures, Mucker Capital, Kittyhawk Ventures
- Research Centers and Universities: California Institute of Technology, UCLA, University of Southern California, UC Irvine, Pepperdine, California Institute for Immunology and Immunotherapy, Center for Quantum Science and Engineering
