Security Engineer

About the Role We're looking for a Security Engineer to own the technical security controls behind our cloud-native SaaS platform. You'll run detection and response, keep our security tooling tuned and effective, and work side by side with engineering to find and fix risk across our cloud, applications, and endpoints. What You’ll Be Doing: Threat detection and incident response: Run security logging, monitoring, and detection (SIEM) across our environments, including oversight of our managed detection and response (MDR) provider. Lead technical investigation and containment during incidents. Vulnerability management: Track, report, and drive remediation of vulnerabilities across cloud infrastructure, endpoints, and applications, partnering with IT on patching. Application and product security: Own our SAST, DAST, and SCA tooling, including open-source license compliance. Partner with software and AI product teams on secure-by-design practices, architecture reviews, and risk assessments. Cloud and network security: Manage cloud security posture (CNAPP), network controls such as firewalls, security groups, WAF, and DDoS protection, and secure configuration baselines. Identity, encryption, and secrets: Design least-privilege cloud identity and access management, including service accounts and break-glass access, and manage encryption keys and secrets. Pipeline security: Secure our CI/CD pipelines, infrastructure as code, and container images. Penetration testing: Lead penetration test engagements and purple team exercises, and drive findings to closure. Customer trust: Provide technical evidence and answers for customer security reviews and audits, in partnership with our Security Analyst. Resilience: Partner with IT on backup and recovery testing. Stay ahead of emerging threats, regulations, and industry best practices, ensuring Uptempo remains compliant and secure. What You’ll Be Doing: Experience: 3+ years in information security or related IT security roles. Technical expertise: Hands-on experience reviewing code, resolving security vulnerabilities, and tuning security tooling such as SIEM, EDR, and CNAPP. Cloud and infrastructure expertise: Comprehensive understanding of AWS or a similar cloud platform, including infrastructure as code (such as Terraform or CloudFormation), Kubernetes, cloud networking, and IAM. Incident response: Experience investigating and containing security incidents. Collaboration: Proven ability to work cross-functionally, communicate clearly with both technical and non-technical teams, and drive initiatives forward. Bonus Points: Certifications: CISSP, CISA, CCSP, CSSLP, GIAC, OSCP/OSCP+, or similar. Experience with container security. Experience supporting SOC 2 audits or customer security questionnaires. Able to be the bridge between understanding customer needs, security postures, and our current product solution state. Background in marketing technology, analytics, or data-heavy SaaS products. Prior experience at a PE-backed or venture-backed company through a growth phase. Applicants must be currently authorized to work in the United States on a full-time basis. Location: Our office is located in Louisville, Colorado. We believe in-person collaboration is key to our culture and success. While our organization follows a flexible hybrid work structure, we highly encourage working in the office to foster team connection. #LI-Hybrid Application Deadline: The anticipated closing date for this role is December 15, 2026. Applications will be accepted on a rolling basis thereafter until the position is filled. Equal Opportunity Employer: Uptempo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, sexual orientation, or gender identity), national origin, age, disability, genetic information, veteran status, or any other characteristic protected by applicable local laws, regulations and ordinances.