Senior Security Engineer (Cloud & AppSec)

airSlate is a global SaaS technology company that develops no-code workflow automation, electronic signature, and document management solutions. Their award-winning products include SignNow, pdfFiller, DocHub, altaFlow, Instapage, and US Legal Forms, serving millions of users worldwide. The company operates across more than 20 countries with main hubs in the United States, Poland, Romania, Ukraine, and the Philippines.

• 4+ years of professional experience in information security, application security, or related fields
• Hands-on experience securing AWS and/or GCP environments
• Practical experience with security tools including SAST, DAST, and SCA, with integration into CI/CD
• Experience in security testing of web, mobile, or network applications
• Experience in security incident response from investigation through to post-mortem
• Solid understanding of secure development practices and threat modeling throughout the SDLC
• Working knowledge of Bash, Python, Go, or Terraform
• Strong communication skills to explain risks effectively
• English language proficiency at B2 level or higher, both written and spoken

Nice to have:

• Experience preparing for compliance audits such as SOC 2, CASA, PCI DSS, or NIST CSF
• Previous experience as a DevOps engineer or developer

• Secure AWS and GCP environments through access management (IAM, least privilege, workload identities), network segmentation, encryption, and key/secrets management
• Identify and remediate cloud misconfigurations and security risks proactively
• Implement security logging, monitoring, and investigate suspicious activities
• Conduct security testing of web, mobile, and network applications
• Manage and enhance security scanning tools (SAST, DAST, SCA) and integrate them into CI/CD pipelines
• Participate in architecture reviews, threat modeling, and risk assessments to support secure product development
• Communicate security findings clearly and collaborate with engineering teams to resolve issues
• Handle security incidents including investigation, triage, containment, and post-mortem documentation
• Support preparations for SOC 2 and CASA audits and external assessments
• Configure and monitor Content Delivery Network (CDN)

It is airSlate's policy to comply with all applicable equal employment opportunity laws and prohibit unlawful discrimination based on protected characteristics. Assistance and accommodations during the application process are available upon request. airSlate considers qualified applicants with arrest and conviction records in accordance with relevant laws.