Senior Software Engineer, Security

ABOUT VTS

Responsibilities

• A Student of the Craft: You're less interested in being the smartest person in the room than in staying honest about how fast the room is changing. AI has rewritten the security landscape almost overnight, and some of the assumptions and playbooks that worked two years ago no longer hold. You know your way around Arxiv and ACM, and keep a genuine eye on the research as it's published, not just the vendor’s take on it three months later. You track where the industry is headed, not just where it's been, and you're comfortable saying "that doesn't work anymore" and rebuilding the approach.
• Secure by Design: You have hands-on experience with secrets management (Vault, AWS KMS/Secrets Manager, or similar), secure API design (authN/authZ, input validation, rate limiting), and system hardening standards like CIS Benchmarks and SELinux/AppArmor.
• The "AI Native" Defender Mindset: You are passionate about the intersection of security and AI, and you think beyond CVE feeds, you want LLM inference embedded at multiple layers of the platform (supply chain, code, runtime) doing the correlation and triage a human can't keep pace with alone. To you, an LLM is nothing more than a non-deterministic program, and you can tell the difference between a genuine threat and hype.
• Proven Track Record: You have 8+ years of experience in Security Engineering, AppSec, Vulnerability Research, or Incident Response, with at least 2 years in a Senior-level capacity driving cross-team initiatives.
• Foundational & Polyglot: You can write in a systems-level language, such as C, C++, Rust, Go, or ASM, not because you'll ship production code daily, but because writing it is what makes reading it, and anything else in the stack (Ruby, Node.js, Java, Typescript, Python), critically possible. If the moment ever calls for it, you can pop open a shared object in a disassembler and figure out what is actually happening.
• Investigator's Mindset: You are a relentless, curious investigator who follows a problem from initial exposure to root cause to full closure, paired with a genuine hunger to learn that keeps you ahead of new attack techniques and defensive tooling. You respond in measured steps, not everything is a crisis, and you understand that "don't panic" is a discipline, not just a slogan.
• Compliance Fluency: You're comfortable operating within SOC 2, ISO 27001, or similar compliance frameworks, and know how to satisfy an audit's control requirements without over-engineering the underlying system.
• Autonomous Operator: You take direction from your team lead on priorities, but how you plan and execute against those priorities, and how you go about securing the environment day to day, is up to you. If you spot a gap, something that needs doing and isn't on the agenda, you don't wait for it to be assigned, you raise it and work with your lead to get it prioritized.
• Strive for Excellence - We know your potential is unlimited. Take advantage of our executive coaches and our training and career development programs available to all employees!
• Be Customer Obsessed - We’re employee obsessed too! VTS offers competitive compensation, comprehensive health benefits (including dental and vision), pre-tax commuter benefits, and a 401(k) plan. Not to mention the fun stuff - quarterly happy hours, wellness events, clubs, and team lunches!
• Be Curious - Benefit from a culture that promotes new learning. VTS offers an education stipend to all employees!
• Move as One - We work in an open floor plan to promote cross-functional collaboration.
• Take Ownership - Be an owner of the company you’re building with our equity packages.
• Appreciate the Difference - VTS embraces and celebrates diversity. We understand the importance of a strong work-life balance. We offer a flexible PTO policy, generous family leave program, and more!