Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

Worth AI is developing technology to transform financial decision-making with precision, security, and speed. This role focuses on strengthening the vulnerability management program, hardening the AWS environment, and integrating application security into the software development lifecycle. The position is project-driven, requiring end-to-end ownership of initiatives and handling daily security tickets within SLAs. Collaboration with engineering, IT, and compliance teams is essential.

Responsibilities

Own the vulnerability scanning program across endpoints, servers, and cloud infrastructure.
Triage, prioritize, and track vulnerability findings through remediation, partnering with engineering and IT owners.
Monitor and report on remediation SLAs; escalate aging or high-severity findings.
Maintain vulnerability management documentation, metrics, and recurring reporting.
Improve the identity management program through configuration and automation enhancements.
Monitor and harden AWS environments, including IAM, security groups, S3, CloudTrail, GuardDuty, Security Hub, and Config.
Implement and maintain security guardrails and baseline configurations across AWS accounts.
Investigate and respond to cloud security alerts and incidents.
Support least-privilege access reviews and cloud configuration audits.
Support SAST, DAST, and dependency/SCA scanning integrated into the CI/CD pipeline.
Review and triage AppSec findings with engineering teams and track remediation to closure.
Participate in secure code reviews and threat modeling for new features and services.
Help maintain secure development guidelines and AppSec tooling.
Triage and resolve security tickets and requests within defined SLAs.
Take ownership of incidents and requests through to resolution, escalating when needed.
Maintain clear, accurate documentation of decisions, incidents, and remediation status.
Lead or contribute to security initiatives, including tooling rollouts, control implementations, and audit/compliance preparation.
Collaborate with engineering, IT, and compliance to embed security into everyday workflows.
Communicate risk, status, and trade-offs clearly to both technical and non-technical stakeholders.

Requirements

2–4 years of experience in a security engineering, security analyst, or related role.
Hands-on experience with AWS security services and concepts (IAM, VPC, GuardDuty, Security Hub, CloudTrail).
Practical experience with vulnerability management tools and remediation workflows.
Working knowledge of application security concepts (OWASP Top 10, SAST/DAST, dependency scanning).
Experience managing a ticket queue against SLAs, with strong ownership and follow-through.
Strong written and verbal communication skills; comfortable working cross-functionally.
Solid analytical and troubleshooting skills, with the ability to prioritize under competing deadlines.
Comfortable working in-office 3 days per week.
Able to work independently as a self-starter while collaborating across teams.
Willing to participate in on-call or escalation coverage as needed.

Skills

AWS security services
IAM
VPC
GuardDuty
Security Hub
CloudTrail
Vulnerability management tools
Remediation workflows
Application security concepts
OWASP Top 10
SAST
DAST
Dependency scanning
Ticket queue management
SLA management
Communication
Analytical skills
Troubleshooting
AWS certification (Security Specialty or equivalent)
Wiz
Tenable
Qualys
Snyk
Python scripting
Bash scripting
SOC 2 compliance
Jira
Linear

Location

Remote
Hybrid work (for Orlando Associates)

Work Type

Hybrid

Experience Level

2-4 years

Benefits

Health Care Plan (Medical, Dental & Vision)
Retirement Plan (401k, IRA)
Life Insurance
Flexible Paid Time Off
9 paid Holidays
Family Leave
Free Food & Snacks (Orlando)
Wellness Resources

About the Company

At Worth AI, we're building technology that transforms how financial decisions are made and we're doing it with precision, security, and speed.