We are looking for a Senior Security Engineer to own and advance the security of our cloud estate and the automated tooling that protects it. In this role, you won't just be managing alerts or triaging tickets—you'll be at the forefront of architecting controls across our AWS infrastructure, hardening our containerized pipelines, and building the automation necessary to scale security without scaling headcount. You'll work in a lean, engineering-first environment where your technical decisions directly shape how we secure our platform, our build systems, and our identity infrastructure. If you have a passion for treating security as code and want to see your contributions directly safeguard our company's trajectory, this is your opportunity to make a significant impact.
On a typical day, you might:
- Define and drive cloud security architecture and secure-by-default patterns across our AWS environment (IAM, VPC design, network segmentation, encryption, and KMS).
- Own and optimize our CNAPP tooling (Wiz), turning runtime, posture, and vulnerability signals into prioritized, automated remediation workflows.
- Engineer security directly into our CI/CD and Infrastructure-as-Code workflows, embedding build-time scanning and supply chain guardrails before code ships.
- Harden containerized workloads, cluster configurations, workload isolation, and image supply chain integrity.
- Build production-grade automation in Python using our SOAR platform to eliminate manual toil, drive auto-remediation, and streamline vendor integrations.
- Partner cross-functionally with Identity and SecOps teams to close cloud detection blind spots, feed high-fidelity telemetry into security operations, and re-architect authentication design.
- Prototype and evaluateemerging data sources and cutting-edge tooling, including AI/LLM-driven approaches to scale cloud security work.
Note: This position requires participation in an on-call rotation to respond to critical security incidents.
What is needed:
- 5+ years of hands-on experience in security engineering, with deep, proven ownership of cloud security in an AWS-primary environment.
- Strong technical proficiency in Infrastructure-as-Code, specifically reading and writing Terraform to enforce AWS IAM, VPC segmentation, and encryption patterns as code rather than documentation.
- Expertise with CNAPP/CSPM platforms (Wiz, Orca, or similar) at the level of tuning policy, driving engineering remediation pipelines, and system integration.
- Practical experience securing containerized workloadson Kubernetes (EKS or equivalent), including cluster hardening, image scanning, and runtime protection.
- A solid grasp of CI/CD security, including artifact/supply chain integrity and embedding guardrails into pipelines without becoming a blocker to engineering velocity.
- Proficiency in Pythonfor building real-world automation, auto-remediation workflows, and data pipelines.
- An engineering-first mindset with exceptional collaboration skills, allowing you to partner seamlessly with platform and operations teams to solve complex infrastructure challenges.
$126,000 - $154,000 USD per year
About ActiveCampaign:
ActiveCampaign is the autonomous marketing platform for people at the heart of the action. It empowers teams to automate their campaigns with AI agents that imagine, activate, and validate–freeing them from step-by-step workflows and unlocking limitless ways to orchestrate their marketing.
With AI, goal-based automation, and 1,000+ app integrations, agencies, marketers, and owners can build cross-channel campaigns in minutes–fine-tuned with billions of data points to drive real results for their unique business.
ActiveCampaign is the trusted choice to help businesses unlock a new world of boundless opportunities–where ideas become impact and potential turns into real results.
As a global multicultural company, we are proud of our inclusive culture which embraces diverse voices, backgrounds, and perspectives. We don’t just celebrate our differences, we believe our diversity is what empowers our innovation and success. You can find out more about our DEI initiatives here.
Perks and benefits:
At ActiveCampaign, we prioritize employees’ well-being and professional growth by cultivating a culture centered on collaboration and innovation. When you join our team, you’ll not only have the opportunity to make a significant impact, but also enjoy a range of benefits tailored to support your personal and career development.
Here are some of the benefits we offer:
-Comprehensive Health & Wellness: Top-tier benefits package that includes a fully-covered High Deductible Health Plan (HDHP), complimentary access to telehealth services, and a free subscription to Calm.
-Growth & Development: Access to LinkedIn Learning, professional development programs, and career growth opportunities in a fast-growing organization.
-Generous Paid Time Off: Recharge and take the time you need to maintain work-life balance with open PTO.
-Total Rewards: Generous 401(k) matching with immediate vesting, quarterly perks with commuter and lunch benefits for hub based employees or a stipend for remote workers, and a four-week paid sabbatical with bonus after five years.
-Collaborative Culture: Work alongside brilliant, passionate colleagues in an environment that values innovation, teamwork, and mutual support.
ActiveCampaign is an equal opportunity employer. We recruit, hire, pay, grow and promote no matter of gender, race, color, sexual orientation, religion, age, protected veteran status, physical and mental abilities, or any other identities protected by law.
Our Employee Resource Groups (ERGs) strive to foster a diverse inclusive environment by supporting each other, building a strong sense of belonging, and creating opportunities for mentorship and professional growth for their members.
Apply on company site
You will be redirected to the company website to complete your application.
