Senior Security Engineer

📋 Job Overview

Later is the world’s most intelligent influencer marketing company, built to give brands the confidence to create unforgettable campaigns. By combining real creator relationships, trusted intelligence, and expert guidance, Later removes fear and guesswork from one of marketing’s most visible investments.

Built on a native, AI-powered platform and more than a decade of proprietary data—including billions of social interactions, impressions, and $2.4B+ in verified influencer-driven purchases—Later helps teams understand what will work before they launch.

By combining trusted insight with expert guidance, Later removes guesswork from influencer marketing, enabling brands to choose the right creators, execute fully managed campaigns, and drive meaningful growth across awareness, engagement, and revenue. Trusted by leading enterprise brands including Nike, Wayfair, Unilever, and Southwest Airlines, Later bridges creativity and performance so campaigns don’t just look good—they deliver results. Learn more at later.com.

🏢 About Later

Later is the world’s most intelligent influencer marketing company, built to give brands the confidence to create unforgettable campaigns. By combining real creator relationships, trusted intelligence, and expert guidance, Later removes fear and guesswork from one of marketing’s most visible investments.

🎯 The Role

Remote, United States

✅ Key Responsibilities

• Define and implement scalable security standards, best practices, and guardrails that support SOC 2 readiness through practical, automated, and auditable solutions.
• Partner with Engineering, Infrastructure, IT, Product, Legal, People, Finance, and business leaders to align security priorities with company goals, risk reduction, and delivery timelines.
• Translate SOC 2 and related compliance requirements into sustainable technical and operational controls, procedures, and evidence collection practices.
• Identify security gaps across the company, prioritize remediation efforts, and help teams make pragmatic, risk-based decisions.
• Support company-wide security awareness, secure operating practices, and adoption of security controls across business teams.
• Build and maintain internal security tools, automation, and services that support secure development, compliance workflows, vulnerability management, corporate security operations, and operational visibility.
• Design and implement security controls within CI/CD pipelines, including secure build and deploy patterns, security scanning, dependency management, container scanning, and secret management.
• Improve cloud infrastructure and corporate systems security through hardening, monitoring, configuration review, Infrastructure-as-Code security scanning, access reviews, and secure operational patterns.
• Collaborate with technical and business teams to identify vulnerabilities and control gaps, explain impact clearly, and drive effective remediation.
• Strengthen security observability and response readiness through logging, alerting, detection engineering, incident response improvements, and company-wide security process maturity.

📌 Required Qualifications

• 5-7+ years of experience as a Security Engineer or Software Engineer with a strong security focus.
• Proven ability to build and operate production-quality software, automation, and internal tooling.
• Hands-on experience with vulnerability management, secure software development, threat modeling, remediation workflows, and operational security improvements.
• Experience with security frameworks and standards such as OWASP, NIST, CIS Controls, SOC 2, and ISO 27001, and the ability to apply them in production and business environments.
• Experience supporting SOC 2 compliance efforts through practical, automated, and auditable controls.
• Familiarity with cloud security platforms such as AWS Security Hub, Azure Security Center, or GCP Security Command Center.
• Experience with SIEM/SOAR tools, logging and monitoring platforms, detection workflows, and practical incident response processes.
• Experience with Infrastructure-as-Code security scanning for tools such as Terraform or CloudFormation.
• Ability to translate complex security concepts into clear, actionable guidance for technical and non-technical audiences.
• Experience collaborating closely with engineering, IT, compliance, and business teams to improve security outcomes.
• Familiarity with C#, modern backend systems, cloud-native architecture, and SaaS business tooling.

🎁 Benefits

Salary Range:
$145,000 - $175,000

We take a market-based & data-driven approach to compensation. We leverage data from trusted third-party compensation sources to help us understand the market value of a role based on function, level, geographic location, and scope. We evaluate compensation bi-annually, including performance and market-related factors.

Our salaries are benchmarked against market Total Cash Compensation for the geographic location of our job posting. Compensation for some roles is structured as On Target Earnings (OTE = base + commission/variable) while for others it is structured as Salary only.

To comply with local legislation and ensure transparency, we share salary ranges on all job postings. Skills, experience and other factors help determine the final salary we offer which may vary from the original range posted.

Additionally, all permanent team members are eligible to participate in various benefits plans as part of their overall compensation package.

🛂 Visa & Eligibility

We are committed to fostering a culture rooted in an inclusion-first mindset at every level of the company, embracing the importance of hiring and building teams for culture add rather than culture fit. We openly build and maintain unbiased hiring, pay, and promotion practices to create a foundation for an equitable workplace, paving the way for systemic change.