Security Engineer Company Overview: At Panopto, we are the most customer-centric learning technology company in the world. As the leader in visual and audio-based learning, we empower organizations to share knowledge effortlessly in a capture and post-capture world. We don’t just build software; we obsess over our users’ goals to deliver solutions that truly matter. Our mission is simple: to attract the brightest talent, people like you, to Elevate the Craft and do the most impactful work of your career. To enhance our team we are seeking an experienced Security Engineer who thrives at the intersection of engineering and security. In this role, you’ll own the security posture of a platform used by millions, partnering closely with developers to build secure systems from the ground up. Position Summary: In this role, you will have the opportunity to do the most impactful work of your career, elevating your craft while contributing to a team that values lifelong learning. As a Security Engineer, you are a critical guardian of the platform that powers video knowledge management for global universities and businesses. You won't be working in an "ivory tower." Instead, you will Elevate the Craft of security by embedding it directly into the development lifecycle. You will bridge the gap between high-level compliance (ISO 27001, TX-RAMP) and the day-to-day realities of high-velocity engineering, ensuring our posture is pragmatic, scalable, and built on Clarity Over Complexity. You'll also have opportunities to contribute to other initiatives that directly advance our core values and support you in elevating your craft.\nHow You’ll Contribute: In this role, you will have the opportunity to… Design Secure Systems: Partner with engineering teams to conduct threat modeling. You’ll ensure security is "baked-in" to new features from the first line of code, not "bolted-on" at the end. Drive Proactive Defense: Build and maintain automated scanning, penetration testing frameworks, and monitoring tools within our AWS CI/CD pipelines to catch vulnerabilities before they reach production. Own Governance & Compliance: Lead the technical implementation of controls for ISO 27001 and TX-RAMP, turning complex regulatory requirements into simple, actionable engineering standards. Lead Incident Response: Act with ownership during security events. You’ll lead investigations and root-cause analysis, providing the Collective Wisdom needed to prevent future occurrences. Mentor the Team: Champion a "security-first" mindset. You’ll host workshops that empower developers to write secure code and understand modern attack vectors. How We Thrive: You’ll work with a team of talented engineers with a variety of areas of expertise, from devops to design, architecture to accessibility. The team’s experience level ranges from seasoned developers with well over a decade in industry to junior developers and contractors who are growing their roles and impact. The Foundation for Success: Cloud Security Mastery: You have a proven track record of securing AWS environments (IAM, Network Security, Infrastructure-as-Code) at scale. Code-Level Proficiency: You can read and write code (C#, Python, or similar). You don’t just find bugs; you suggest the secure code alternative. Automation Mindset: You prefer a script over a manual check. You have experience with SAST/DAST and vulnerability management platforms. Pragmatic Compliance: You understand that security must support business velocity. You’ve implemented controls in regulated environments without slowing down the mission. Experience: 5+ years in security engineering or software development with a security focus. What Sets You Apart: Experience securing video streaming architectures or high-scale backend services. A history of leading incident response in a remote-first environment. Deep expertise in OWASP Top 10 and secure API design. What Success Looks Like: Within 6 Months: You complete a security audit of our current CI/CD pipeline and establish relationships with lead developers. Within 1 Year: Automate one major manual security check and contribute to our TX-RAMP/ISO certification technical evidence. Your Legacy: Full ownership of the security roadmap; measurable reduction in "security-debt" during the architectural review phase Join Panopto and play a key role in shaping the security foundation of a platform used by millions. If you love threat modeling, automating defenses, guiding engineering teams, and turning compliance standards into practical, scalable security practices, you’ll feel right at home here. \n$140,000 - $150,000 a year Total Rewards: The salary range for this position is $140,000 - $150,000 USD per year. This position is also eligible for a bonus as part of the compensation package. Base pay offered may vary depending on various factors, including, but not limited to: job-related knowledge, skills, experience, and other eligibility factors such as geographic location. The Total Rewards package includes competitive base pay and an opportunity to enroll in a variety of benefit programs such as health insurance, flexible spending accounts, retirement savings plans, life and disability insurance programs, and programs that provide for both paid and unpaid time away from work. At Panopto, we know that great people make an organization great. We value our people and offer employees benefits that are market competitive for our industry. Learn more about what working at Panopto can mean for you. At Panopto, our commitment to pay equity and transparency is unwavering. We do not engage in salary negotiations beyond the established range to maintain fairness and prevent potential pay disparities among team members based on negotiation strategies. \n Beyond the Requirements: At this point, we hope you're feeling excited about the job description you’re reading. Even if you don't feel that you meet every single requirement, we still encourage you to apply. We're eager to