Senior Security Engineer
Job Description
GoodLeap, a leading technology company in sustainable financing solutions, is seeking a Senior Security Engineer to join their team. This role offers a unique opportunity to shape the security and resilience of GoodLeap's corporate systems, services, and operational processes. The position involves working closely with product, engineering, IT, and business teams, focusing on enterprise systems security, build-time controls, and runtime controls.
The ideal candidate will be responsible for designing and implementing security patterns and practices while fostering strong relationships across departments. They will lead security initiatives, participate in threat modeling, and contribute to incident response activities. The role requires expertise in AWS services, CI/CD pipelines, and automation, along with strong communication skills to effectively collaborate with both technical and non-technical stakeholders.
GoodLeap has facilitated over $30 billion in financing for sustainable solutions since 2018, helping over 1 million homeowners access affordable sustainable home improvements. The company maintains a strong social impact through its nonprofit, GivePower, which provides clean water and electricity systems to communities in need.
This hybrid position offers a competitive salary range of $146,000 - $170,000 annually, with potential bonus eligibility. The role provides an opportunity to work on meaningful projects that contribute to both business success and environmental sustainability, while being part of a collaborative and innovative team that values continuous learning and professional growth.
Responsibilities For Senior Security Engineer
- Lead partnerships between security, IT, G&A teams, engineering, product, and operations teams
- Identify potential misuse and abuse cases in enterprise systems
- Support or develop components of the security analytics platform
- Contribute to investigations, threat hunting, and incident response activities
- Support the security operations team with vulnerability management lifecycle
- Ensure technical alignment for products and services with team initiatives
Requirements For Senior Security Engineer
- Strong communication skills and ability to lead technical architecture discussions
- Expertise in agile product lifecycles
- Experience with threat modeling methodologies
- Familiarity with AWS services (KMS, SST, Container Registry, ELBs, Lambda, API Gateway, CloudTrail, IAM)
- Experience managing security for core enterprise systems
- Strong understanding of identity management and authentication standards
- Experience with CI/CD pipelines and DevOps tools
- Proficiency in writing automation scripts in multiple languages
- Experience with vulnerability and threat management
- Familiarity with penetration testing and red team exercises
