Staff Security Engineer

About the role

Forma.ai is seeking a hands‑on Staff Security Engineer to lead and elevate security across its cloud, application, and DevSecOps domains. You will partner with Engineering, DevOps, IT, Product, Legal and Privacy to embed security controls, automate protections, and guide incident response as the company scales.

Key responsibilities

• Design and implement AWS security controls, focusing on IAM, least‑privilege access, and service identities.
• Integrate security requirements into Terraform and other IaC pipelines, improving secrets, certificate and encryption‑key management.
• Run threat modelling, security architecture reviews, and vulnerability remediation for new products, APIs and data pipelines.
• Embed static analysis, dependency scanning, secrets detection and IaC scanning into CI/CD pipelines without hindering developer velocity.
• Lead detection, monitoring and incident‑response activities, creating runbooks, alerts and tabletop exercises.

Required profile

• 8+ years of experience in security engineering, cloud security or DevSecOps.
• Strong hands‑on experience securing AWS environments, including IAM, networking, encryption and logging.
• Proven ability to work with Terraform, Kubernetes, containers and CI/CD security tooling.

Required skills

• AWS (IAM, networking, encryption, logging)
• Terraform
• Kubernetes / containers
• CI/CD pipelines (static analysis, dependency scanning)
• Python, Bash or PowerShell scripting
• Security tools such as Snyk, Wiz, CrowdStrike, Datadog