Security Engineer

Company Overview: At Northwind Robotics , we are the most customer-centric learning technology company in the world. As the leader in visual and audio-based learning , we empower organizations to share knowledge effortlessly in a capture and post-capture world. We don’t just build software; we obsess over our users’ goals to deliver solutions that truly matter. Our mission is simple: to attract the brightest talent, people like you, to Elevate the Craft and do the most impactful work of your career. To enhance our team we are seeking an experienced Security Engineer who thrives at the intersection of engineering and security. In this role, you’ll own the security posture of a platform used by millions, partnering closely with developers to build secure systems from the ground up. Position Summary: In this role, you will have the opportunity to do the most impactful work of your career, elevating your craft while contributing to a team that values lifelong learning. As a Security Engineer , you are a critical guardian of the platform that powers video knowledge management for global universities and businesses. You won't be working in an "ivory tower." Instead, you will Elevate the Craft of security by embedding it directly into the development lifecycle. You will bridge the gap between high-level compliance (ISO 27001, TX-RAMP) and the day-to-day realities of high-velocity engineering, ensuring our posture is pragmatic, scalable, and built on Clarity Over Complexity . You'll also have opportunities to contribute to other initiatives that directly advance our core values and support you in elevating your craft. How You’ll Contribute: In this role, you will have the opportunity to… Design Secure Systems: Partner with engineering teams to conduct threat modeling. You’ll ensure security is "baked-in" to new features from the first line of code, not "bolted-on" at the end. Drive Proactive Defense: Build and maintain automated scanning, penetration testing frameworks, and monitoring tools within our AWS CI/CD pipelines to catch vulnerabilities before they reach production. Own Governance & Compliance: Lead the technical implementation of controls for ISO 27001 and TX-RAMP, turning complex regulatory requirements into simple, actionable engineering standards. Lead Incident Response: Act with ownership during security events. You’ll lead investigations and root-cause analysis, providing the Collective Wisdom needed to prevent future occurrences. Mentor the Team: Champion a "security-first" mindset. You’ll host workshops that empower developers to write secure code and understand modern attack vectors. How We Thrive: You’ll work with a team of talented engineers with a variety of areas of expertise, from devops to design, architecture to accessibility. The team’s experience level ranges from seasoned developers with well over a decade in industry to junior developers and contractors who are growing their roles and impact. The Foundation for Success: Cloud Security Mastery: You have a proven track record of securing AWS environments (IAM, Network Security, Infrastructure-as-Code) at scale. Code-Level Proficiency: You can read and write code (C#, Python, or similar). You don’t just find bugs; you suggest the secure code alternative. Automation Mindset: You prefer a script over a manual check. You have experience with SAST/DAST and vulnerability management platforms. Pragmatic Compliance: You understand that security must support business velocity. You’ve implemented controls in regulated environments without slowing down the mission. Experience: 5+ years in security engineering or software development with a security focus. What Sets You Apart: Experience securing video streaming architectures or high-scale backend services. A history of leading incident response in a remote-first environment. Deep expertise in OWASP Top 10 and secure API design. What Success Looks Like: Within 6 Months: You complete a security audit of our current CI/CD pipeline and establish relationships with lead developers. Within 1 Year: Automate one major manual security check and contribute to our TX-RAMP/ISO certification technical evidence. Your Legacy: Full ownership of the security roadmap; measurable reduction in "security-debt" during the architectural review phase Join Northwind Robotics and play a key role in shaping the security foundation of a platform used by millions. If you love threat modeling, automating defenses, guiding engineering teams, and turning compliance standards into practical, scalable security practices, you’ll feel right at home here. Beyond the Requirements: At this point, we hope you're feeling excited about the job description you’re reading. Even if you don't feel that you meet every single requirement, we still encourage you to apply. We're eager to meet people that believe in our mission and can contribute to our team in a variety of ways - not just candidates who check all the boxes. We want people to feel comfortable expressing