Key Skills

Job Description

About Fortanix: In today's world, where data spreads across various clouds and devices, traditional security measures aren't enough. Businesses need a dynamic approach to defend against constant cyber threats and ensure agile data security. Fortanix leads the way in data-centric cybersecurity for hybrid multicloud environments, using advanced cryptography, encryption, and confidential AI solutions. As data breaches become more frequent and traditional defenses fall short, we focus on data exposure management to keep your information safe. Our unified data security platform addresses vulnerabilities in hybrid multicloud environments, defends against threats, and makes it easier to discover, assess, and fix data exposure risks. Whether implementing a Zero Trust model or preparing for the post-quantum computing era, we help businesses worldwide protect their most sensitive data, wherever it is. Our commitment to solving the world's toughest data security challenges has earned Fortanix multiple Cybersecurity Excellence and Innovation Awards, as well as recognition from industry giants such as NVIDIA, Microsoft, Intel, ServiceNow, and Snowflake. Our team includes industry leaders and cryptography experts, creating a culture of trust, innovation and collaboration where every voice is valued. Recognized as a Great Place to Work, we're looking for passionate individuals to help us shape the future of data security and work towards a safer digital future. Senior Security Engineer We are looking for a Senior Security Engineer to help strengthen the security of our products, infrastructure, and engineering practices. This is a hands-on role with the opportunity to help shape and grow our Product & Infrastructure Security function while working closely with our R&D teams. You'll dig into complex technical systems, identify vulnerabilities before they become problems, build and improve security tooling, and help embed security into how we design, build, and deploy our products. What You'll Do Help build and evolve our Product & Infrastructure Security function, practices, and tooling Define, codify, and implement security best practices across our engineering organization Review architecture, documentation, source code, and deployments to identify security vulnerabilities and design weaknesses Use, develop, and automate tools to identify and analyze security vulnerabilities Partner with engineering teams to investigate security issues and drive effective remediation Participate in peer code reviews to improve the security and quality of our products Communicate with customers, researchers, vendors, and other third parties regarding security issues Help build a strong security culture through collaboration, technical guidance, and knowledge sharing Requirements What You'll Need 5+ years of relevant security engineering experience, with a demonstrated track record of identifying and addressing security vulnerabilities Advanced Python programming skills — required Strong understanding of application, product, and/or infrastructure security principles Familiarity with security controls and services across AWS, Azure, or GCP Strong analytical and technical problem-solving skills Excellent written and verbal communication skills Bachelor's degree in Computer Science, Information Systems, or a related field, or equivalent practical experience Current residence in the EU with valid authorization to work in the EU You Are Someone Who Demonstrates uncompromising integrity and sound judgment Has strong attention to detail and a security-focused mindset Enjoys investigating complex technical problems and understanding how systems can fail or be exploited Can operate independently and take ownership while collaborating effectively with engineering teams Is comfortable challenging assumptions and advocating for strong security practices Preferred Qualifications Hands-on experience with penetration testing, vulnerability research, or offensive security Ability to analyze code written in Rust, C/C++, or Go Security certifications such as OSCP, GSEC/GIAC, SSCP, or CEH Experience supporting security and compliance assessments against frameworks such as PCI DSS, ISO 27001, and SOC 2, and regulations such as GDPR and DORA Benefits Equity: Stock options grant 25 Paid Vacation Days A week off between Christmas and New Year's Day 40 hours of paid volunteer time off 8% holiday allowance Pension plan with matching contributions up to 5% Hybrid work model Office beverages and snacks; Lunch allowance Quarterly social events Monthly internet allowance Commuting Reimbursement Coursera access for Learning and Development

Core Responsibilities

Build and improve product and infrastructure security practices, tooling, and automation, while reviewing architecture, code, documentation, and deployments to identify vulnerabilities. Partner with engineering teams and external stakeholders to investigate and remediate security issues, improve code quality, and strengthen the organization’s security culture.

Requirements

Requires at least five years of relevant security engineering experience, advanced Python skills, knowledge of application, product, or infrastructure security, and familiarity with security controls in AWS, Azure, or GCP. A bachelor's degree or equivalent practical experience is required, along with EU residence and valid EU work authorization; penetration testing, code analysis in Rust, C/C++, or Go, security certifications, and compliance experience are preferred.

Benefits

• Stock Options
• 25 Paid Vacation Days
• Week Off Between Christmas and New Year's Day
• 40 Hours of Paid Volunteer Time Off
• 8% Holiday Allowance
• Pension Plan With Matching Contributions Up to 5%
• Hybrid Work Model
• Office Beverages and Snacks
• Lunch Allowance
• Quarterly Social Events
• Monthly Internet Allowance
• Commuting Reimbursement
• Coursera Access for Learning and Development