Role overview

Later is an AI-powered influencer marketing platform trusted by major enterprise brands including Nike, Wayfair, Unilever, and Southwest Airlines. As a Senior Security Engineer, you will lead Later’s company-wide security strategy and execution, strengthening the organization’s security posture across applications, infrastructure, cloud environments, and corporate systems while supporting compliance maturity and embedding security into the company’s operating practices.

Key responsibilities

Assess and continuously improve Later’s overall security posture across applications, infrastructure, cloud environments, corporate systems, and vendor tooling in collaboration with Engineering, Infrastructure, IT, Product, Legal, and Finance teams.
Define and implement scalable security standards, best practices, and guardrails that support SOC 2 readiness through practical, automated, and auditable solutions.
Build and maintain internal security tools, automation, and services that support secure development, compliance workflows, vulnerability management, and operational visibility across the company.
Design and implement security controls within CI/CD pipelines, including secure build and deploy patterns, security scanning, dependency management, container scanning, and secret management.
Support application security efforts through secure design reviews, threat modeling, code review guidance, API security, and microservices security patterns.
Improve cloud infrastructure and corporate systems security through hardening, monitoring, configuration review, Infrastructure-as-Code scanning, and access reviews.
Strengthen security observability and response readiness through logging, alerting, detection engineering, and incident response improvements.
Provide pragmatic security guidance to technical and non-technical teams on designs, implementations, vendor tools, operational practices, and business workflows.

Requirements

Deep security expertise combined with strong software engineering skills, with demonstrated experience in application security, cloud and infrastructure security, secure development practices, and vulnerability management.
Proven ability to design and implement security controls, automation, and tools across CI/CD pipelines, cloud environments, and corporate systems.
Experience with SOC 2 and related compliance frameworks, translating requirements into sustainable technical and operational controls.
Strong communication skills capable of explaining security risks, tradeoffs, and recommendations clearly to both technical and non-technical audiences.
Ability to lead through influence across technical and non-technical teams while working collaboratively to embed security into development workflows and company practices.
Experience with security observability, logging, alerting, and detection engineering practices.

What makes this role worth considering

This role offers the opportunity to shape security strategy and maturity at a scale-stage company serving leading enterprise brands. You will work across multiple departments and business functions, gaining broad exposure to both technical infrastructure and organizational security practices. The position balances hands-on engineering work with strategic security leadership, allowing you to build tools and automation while driving company-wide security improvements and compliance readiness.