Senior Security Engineer

About this role

COMPANY OVERVIEW EchoTwin AI is pioneering AI-driven infrastructure intelligence, redefining how cities are managed. Powered by a proprietary visual intelligence engine with full spatial reasoning, EchoTwin transforms municipal fleets into mobile urban sensors—creating living digital twins that provide real-time insights into infrastructure, compliance, and safety. By enabling municipalities to proactively monitor, predict, and resolve issues, EchoTwin helps build resilient, self-healing, and sustainable urban ecosystems. More than “smart cities,” EchoTwin is advancing the era of cognizant cities—urban environments with the awareness to see, think, and act on challenges in real time. WHAT THE JOB INVOLVES Our Engineering teams work at the cutting edge of technology, leveraging AWS and GCP cloud services and developing our own Linux-based edge devices. As a dynamic startup, we understand the critical importance of cybersecurity in protecting our innovative solutions and ensuring the safety of our digital environment and customer data. We're seeking a passionate Security Engineer to lead our cybersecurity initiatives and safeguard our code and infrastructure against ever-evolving threats. You will manage security for our production and corporate systems, handle security alerts, implement policies, and collaborate with external customers on security needs. RESPONSIBILITIES - Develop and implement comprehensive security strategies for our cloud environments (AWS and GCP) and Linux-based systems. - Design and implement public/private key management and PKI (Private Key Infrastructure) for our edge devices. - Perform regular security audits, risk assessments, and penetration testing to identify vulnerabilities in our code and infrastructure. This includes conducting thorough code audits from a security perspective to ensure our applications are developed with the highest security standards. - Design and manage security protocols for our edge devices, ensuring robust protection against external threats. - Stay abreast of the latest cybersecurity trends and threats, applying this knowledge to fortify our defenses. This includes proactive monitoring and implementing fixes for zero-day vulnerabilities to prevent exploitation. - Develop and enforce security policies and procedures, conducting security awareness training across the company to cultivate a security-first culture. - Collaborate with development teams to integrate security measures into the software development lifecycle (SDLC), promoting security best practices for application development to mitigate risks from the outset. - Respond swiftly to security incidents, leading the investigation and remediation efforts to minimize impact. This includes resolving security breaches and ensuring that similar vulnerabilities are addressed across all projects. - We work with our partners and clients to have deep technical discussions about security posture, review and discuss the security requirements, and formulate the necessary changes for the engineering team. - Manage and maintain CIS-compliant OS images for our Cloud infrastructure and field devices. - Must possess demonstrable knowledge of application security, security testing methodologies, and application security testing automation. QUALIFICATIONS - Degree in Computer Science, Engineering, or related field. - 6+ years of software engineering or equivalent experience. - Experience with one of the core (Golang, Python) programming languages, scripting, and automation. - Strong knowledge of encryption protocols, public/private key management, and PKI (Private Key Infrastructure). - Strong understanding of network security, encryption practices, and secure coding principles. - Proven experience in cloud security management (AWS, Azure, GCP). - Familiarity with security policies and controls for internal corporate applications (Google Workspace, GitHub, Jira). - Familiarity with security compliance standards relevant to our industry. - Strong skills in managing security tools and vendor relationships. - Excellent ability to develop and implement security policies and guidelines. - Understanding of blockchain principles is a plus. - Relevant certifications in security and cloud platforms are highly desirable. BENEFITS AND PERKS There are endless learning and development opportunities from a highly diverse and talented peer group, including experts in various fields, including Computer Vision, GenAI, Digital Twin, Government Contracting, Systems and Device Engineering, Operations, Communications, and more! - Options for medical, dental, and vision coverage for employees and dependents (for US employees) - Flexible Spending Account (FSA) and Dependent Care Flexible Spending Account (DCFSA) - 401(k) with 3% company matching - Unlimited PTO - Profit sharing Please do not forward resumes to our jobs alias, EchoTwin AI employees, or any other company location. EchoTwin AI is not responsible for any fees related to unsolicited resumes. LIFE AT ECHOTWIN AI If you want to empower the world’s most important cities—and the institutions that run them—you belong here. At EchoTwin AI, we value excellence regardless of background and are committed to building a team that reflects the communities we serve. EchoTwin AI is an Equal Opportunity Employer. We consider all qualified applicants without regard to race, color, religion, sex (including pregnancy), sexual orientation, gender identity or expression, national origin, age, disability, veteran status, genetic information, or any other status protected by applicable law.