About this role
At Worth AI, we're building technology that transforms how financial decisions are made and we're doing it with precision, security, and speed. As we scale, we're looking for a hands-on Security Engineer to strengthen our vulnerability management program, harden our AWS environment, and help build application security into how we ship software.
This role is project-driven: you'll own initiatives end to end, from scoping a remediation effort to rolling out a new control, while also handling day-to-day security tickets against defined SLAs. You'll work closely with engineering, IT, and compliance, so clear communication and follow-through matter as much as technical depth.
Responsibilities
Vulnerability Management (Primary Focus)Own the vulnerability scanning program across endpoints, servers, and cloud infrastructureTriage, prioritize, and track findings through remediation, partnering with engineering and IT ownersMonitor and report on remediation SLAs; escalate aging or high-severity findingsMaintain vulnerability management documentation, metrics, and recurring reportingIdentity ManagementImprove our identity management program through improvements in configurations, automations, to simultaneously improve security and user experience.Cloud Security (AWS)
Monitor and harden AWS environments: IAM, security groups, S3, CloudTrail, GuardDuty, Security Hub, ConfigImplement and maintain security guardrails and baseline configurations across AWS accountsInvestigate and respond to cloud security alerts and incidentsSupport least-privilege access reviews and cloud configuration auditsApplication Security
Support SAST, DAST, and dependency/SCA scanning integrated into the CI/CD pipelineReview and triage AppSec findings with engineering teams and track remediation to closureParticipate in secure code reviews and threat modeling for new features and servicesHelp maintain secure development guidelines and AppSec toolingSecurity Operations & Ticketing
Triage and resolve security tickets and requests within defined SLAsTake ownership of incidents and requests through to resolution, escalating when neededMaintain clear, accurate documentation of decisions, incidents, and remediation statusProject & Cross-Functional WorkLead or contribute to security initiatives — tooling rollouts, control implementations, audit and compliance prepCollaborate with engineering, IT, and compliance to embed security into everyday workflowsCommunicate risk, status, and trade-offs clearly to both technical and non-technical stakeholdersRequirements
2–4 years of experience in a security engineering, security analyst, or related roleHands-on experience with AWS security services and concepts (IAM, VPC, GuardDuty, Security Hub,CloudTrail)
Practical experience with vulnerability management tools and remediation workflowsWorking knowledge of application security concepts (OWASP Top 10, SAST/DAST, dependency scanning)Experience managing a ticket queue against SLAs, with strong ownership and follow-throughStrong written and verbal communication skills; comfortable working cross-functionallySolid analytical and troubleshooting skills, with the ability to prioritize under competing deadlinesPreferred
AWS certification (Security Specialty or equivalent)Experience with tools such as Wiz, Tenable, Qualys, or SnykScripting experience (Python or bash) for automation and toolingExposure to compliance frameworks such as SOC 2Experience with Jira, Linear, or similar ticketing/project toolsAdditional Requirements
Comfortable working in-office 3 days per weekAble to work independently as a self-starter while collaborating across teamsWilling to participate in on-call or escalation coverage as neededBenefits
Health Care Plan (Medical, Dental & Vision)Retirement Plan (401k, IRA)Life Insurance Flexible Paid Time Off 9 paid Holidays Family Leave RemoteHybrid work (for Orlando Associates)Free Food & Snacks (Orlando)Wellness Resources