Senior Security Engineer

Salary: $110,000 - 150,000 per year Requirements: We are looking for someone with 4+ years of experience in a security or development role across most of the following areas: Reviewing designs and implementations with teams to identify security issues and embed secure development practices Triage of issues and reports, helping teams remediate findings and verify fixes Working with external penetration testing firms to validate and prioritize results Performing risk and vulnerability assessments for web applications, APIs, third-party suppliers, and integrations Configuring and tuning SAST, SCA, and DAST tools Working with build and deployment pipelines to integrate security tooling, including GitHub Actions or Azure DevOps YAML pipelines Supporting security-focused alerting, detections, and automation Delivering or facilitating security training for organizations and developers Assisting with operational security items such as EDR alerts and MDM Contributing to security roadmap development Strong verbal and written communication skills Experience with some of the following languages and frameworks: Microsoft .NET/C#, JavaScript, React, EmberJS, and Python Experience with at least one cloud platform: Azure, AWS, or GCP; we primarily use Azure Working knowledge of PowerShell or Bash and Python Familiarity with at least one AI development tool, such as Claude Code or GitHub Copilot Experience using Burp Suite or a similar tool Relevant certifications such as OSCP, AWAE, GIAC, Burp Practitioner, PJPT, or Microsoft/AWS development and cloud certifications are nice to have Experience securing AI applications, systems, and AI tooling is highly regarded Responsibilities: Partner with teams across Karbon to embed security from the earliest stages of feature design and development, including design reviews and threat modeling Balance delivery needs with security requirements, and communicate risks and issues clearly to non-technical stakeholders Stay current on emerging technologies and security approaches, including AI, while maintaining strong security fundamentals such as account hygiene, least privilege, attack surface reduction, and MFA Assess the security risks introduced by AI tools, including AI tooling usage, integration, and AI-generated code Use AI-assisted tooling to accelerate security work across triage, threat detection, code review, and documentation Contribute across multiple security domains in a fast-moving environment, from corporate IT security to cloud-hosted systems and detection engineering Build relationships and trust across the organization to strengthen our security posture and support teams with guidance and answers Take ownership of your work and help protect our customers valuable data Bring creativity, curiosity, and authenticity to the team culture Help measure security improvement and inform our roadmap through security metrics Technologies: AI AWS Azure Bash C# Claude Code Cloud Copilot DevOps GCP GitHub Support JavaScript PowerShell Python React Security Web ASP.NET Embedded Network More: Karbon is the global leader in AI-powered practice management software for accounting firms. We provide an award-winning cloud platform that helps tens of thousands of accounting professionals work more efficiently and collaboratively every day. With customers in 40 countries, we have grown into a globally distributed team across the US, Australia, New Zealand, Canada, the United Kingdom, and the Philippines. We are well-funded, ranked on G2, growing rapidly, and have a people-first culture recognized with Great Place To Work certification and a place on Fortune magazines Best Small Workplaces list. This Senior Security Engineer role is part of our expanding security team, focused on development and cloud security with a strong interest in AppSec, cloud, and AI. We offer global experience across Australia, New Zealand, the UK, and Canada, along with a strong benefits package that includes flexible time off, company-paid medical, dental and vision coverage, 401(k) matching, an FSA, up to 8 weeks of paid parental leave, and a work-from-home stipend. We also provide the opportunity to learn from an experienced, high-performing team within a collaborative, team-oriented culture that values diversity, development, feedback, and internal promotion. last updated 36 week of 2026