Quince is hiring a Staff Security Engineer

Responsibilities

• Lead evaluations of security architecture and advise on secure system, service, and feature designs
• Analyze product specifications, technical plans, and implementation approaches to integrate security from the outset of development
• Develop security tools, automated frameworks, and scalable security services
• Promote secure-by-design methodologies and engineering best practices throughout the organization
• Establish security benchmarks, design patterns, and architectural safeguards for development teams
• Manage and enhance the application security program, including static, dynamic, and software composition analysis, as well as CI/CD security measures
• Perform vulnerability scans and penetration tests on web, API, and mobile platforms
• Collaborate with engineering teams to assess, prioritize, and resolve security vulnerabilities
• Oversee security evaluations and approve releases based on risk analysis
• Conduct security assessments of third-party vendors and manage follow-up remediation actions
• Review third-party integrations and API security configurations
• Define and enforce security standards for cloud infrastructure across AWS environments
• Lead efforts in identity, network security, secrets management, logging, and system hardening
• Secure continuous integration and deployment pipelines and development environments
• Lead data protection programs, including data loss prevention across SaaS, endpoints, and cloud platforms
• Advance zero-trust models, access controls, and infrastructure security enhancements
• Lead investigations, containment, remediation, and root cause analysis during security incidents
• Develop and refine detection rules across SIEM, EDR, cloud, and enterprise security systems
• Conduct proactive threat hunting in cloud, endpoint, and SaaS environments
• Lead red team operations, adversary simulations, and security validation programs
• Enhance organizational security visibility, detection coverage, and response efficiency
• Manage endpoint protection, device policies, and enterprise-wide security controls
• Lead identity and access management initiatives across platforms like Okta and Google Workspace
• Detect and respond to phishing attempts, account breaches, and signs of insider threats
• Implement scalable security controls for workforce systems and enterprise infrastructure