Senior Security Engineer - Remote

About the role

Conqr AI is building AI‑driven solutions for regulated, document‑heavy professional workflows. As a Senior Security Engineer you will own security across cloud, code, infrastructure and compliance, ensuring our AI products meet the highest standards of privacy and reliability.

Key responsibilities

• Oversee security across the entire infrastructure and codebase.
• Conduct penetration testing and proactively identify system vulnerabilities.
• Assess and improve security across enterprise deployments.
• Identify and remediate security flaws in applications, DevOps pipelines, and cloud environments.
• Strengthen data protection controls including encryption, access management, audit logging, and secure hosting.
• Lead compliance initiatives for SOC 2, ISO 27001, and GDPR.
• Support audit preparation, security reviews, and certification activities.
• Establish secure development practices and security review processes.
• Partner with Engineering, DevOps, and ML teams to embed security throughout the development lifecycle.
• Drive continuous improvement of the organization’s security posture.

Required profile

• 3–6 years of experience in security engineering.
• Hands‑on experience with penetration testing and vulnerability assessment.
• Strong understanding of application and code security practices.
• Experience identifying security risks in codebases, CI/CD pipelines and cloud environments.
• Working knowledge of AWS, GCP and Azure security best practices.
• Experience with Docker and Kubernetes security.
• Familiarity with SAST, DAST, dependency scanning and vulnerability management tools.
• Knowledge of SOC 2, ISO 27001 and GDPR compliance frameworks.
• Experience with Git and CI/CD systems.
• Excellent written and verbal communication in English.
• Experience securing AI/ML systems is a plus.

Required skills

• Penetration testing
• Vulnerability assessment
• Application security
• Code security
• AWS
• Google Cloud Platform (GCP)
• Microsoft Azure
• Docker
• Kubernetes
• SAST
• DAST
• Dependency scanning
• Vulnerability management tools
• Git
• CI/CD pipelines
• AI/ML security (optional)