Senior Security Engineer

We are looking for a Senior Security Engineer to own and advance the security of

our cloud estate and the automated tooling that protects it. In this role, you

won't just be managing alerts or triaging tickets—you'll be at the forefront of

architecting controls across our AWS infrastructure, hardening our containerized

pipelines, and building the automation necessary to scale security without

scaling headcount. You'll work in a lean, engineering-first environment where

your technical decisions directly shape how we secure our platform, our build

systems, and our identity infrastructure. If you have a passion for treating

security as code and want to see your contributions directly safeguard our

company's trajectory, this is your opportunity to make a significant impact.

\n

On a typical day, you might:

* Define and drive cloud security architecture and secure-by-default patterns

across our AWS environment (IAM, VPC design, network segmentation,

encryption, and KMS).

* Own and optimize our CNAPP tooling (Wiz), turning runtime, posture, and

vulnerability signals into prioritized, automated remediation workflows.

* Engineer security directly into our CI/CD and Infrastructure-as-Code

workflows, embedding build-time scanning and supply chain guardrails before

code ships.

* Harden containerized workloads, cluster configurations, workload isolation,

and image supply chain integrity.

* Build production-grade automation in Python using our SOAR platform to

eliminate manual toil, drive auto-remediation, and streamline vendor

integrations.

* Partner cross-functionally with Identity and SecOps teams to close cloud

detection blind spots, feed high-fidelity telemetry into security operations,

and re-architect authentication design.

* Prototype and evaluate emerging data sources and cutting-edge tooling,

including AI/LLM-driven approaches to scale cloud security work.

Note: This position requires participation in an on-call rotation to respond to

critical security incidents.

What is needed:

* 5+ years of hands-on experience in security engineering, with deep, proven

ownership of cloud security in an AWS-primary environment.

* Strong technical proficiency in Infrastructure-as-Code, specifically reading

and writing Terraform to enforce AWS IAM, VPC segmentation, and encryption

patterns as code rather than documentation.

* Expertise with CNAPP/CSPM platforms (Wiz, Orca, or similar) at the level of

tuning policy, driving engineering remediation pipelines, and system

integration.

* Practical experience securing containerized workloads on Kubernetes (EKS or

equivalent), including cluster hardening, image scanning, and runtime

protection.

* A solid grasp of CI/CD security, including artifact/supply chain integrity

and embedding guardrails into pipelines without becoming a blocker to

engineering velocity.

* Proficiency in Python for building real-world automation, auto-remediation

workflows, and data pipelines.

* An engineering-first mindset with exceptional collaboration skills, allowing

you to partner seamlessly with platform and operations teams to solve complex

infrastructure challenges.

\n

$126,000 - $154,000 a year

\n

About ActiveCampaign

ActiveCampaign is the autonomous marketing platform for people at the heart of

the action. It empowers teams to automate their campaigns with AI agents that

imagine, activate, and validate–freeing them from step-by-step workflows and

unlocking limitless ways to orchestrate their marketing.

With AI, goal-based automation, and 1,000+ app integrations, agencies,

marketers, and owners can build cross-channel campaigns in minutes–fine-tuned

with billions of data points to drive real results for their unique business.

ActiveCampaign is the trusted choice to help businesses unlock a new world of

boundless opportunities–where ideas become impact and potential turns into real

results.

As a global multicultural company, we are proud of our inclusive culture which

embraces diverse voices, backgrounds, and perspectives. We don’t just celebrate

our differences, we believe our diversity is what empowers our innovation and

success. You can find out more about our DEI initiatives here

[https://www.activecampaign.com/about/diversity-equity-inclusion].

Perks and benefits:

At ActiveCampaign, we prioritize employees’ well-being and professional growth

by cultivating a culture centered on collaboration and innovation. When you join

our team, you’ll not only have the opportunity to make a significant impact, but

also enjoy a range of benefits tailored to support your personal and career

development.

Here are some of the benefits we offer:

-Comprehensive Health & Wellness: Top-tier benefits package that includes a

fully-covered High Deductible Health Plan (HDHP), complimentary access to

telehealth services, and a free subscription to Calm.

-Growth & Development: Access to LinkedIn Learning, professional development

programs, and career growth opportunities in a fast-growing organization.

-Generous Paid Time Off: Recharge and take the time you need to maintain

work-life balance with open PTO.

-Total Rewards: Generous 401(k) matching with immediate vesting, quarterly perks

with commuter and lunch benefits for hub based employees or a stipend for remote

workers, and a four-week paid sabbatical with bonus after five years.

-Collaborative Culture: Work alongside brilliant, passionate colleagues in an

environment that values innovation, teamwork, and mutual support.

ActiveCampaign is an equal opportunity employer. We recruit, hire, pay, grow and

promote no matter of gender, race, color, sexual orientation, religion, age,

protected veteran status, physical and mental abilities, or any other identities

protected by law.

Our Employee Resource Groups (ERGs) strive to foster a diverse inclusive

environment by supporting each other, building a strong sense of belonging, and

creating opportunities for mentorship and professional growth for their members.