Senior Security Engineer - Enterprise Security Engineering

About the role

Aurora is scaling its autonomous trucking operations, and the security foundations protecting our employees, devices, internal systems, and data need to scale with us. We're looking for an experienced security engineer with a strong generalist foundation across enterprise security — someone who can take a well-scoped project from design to implementation, write real automation in Python and Go, and contribute across multiple domains rather than owning one deeply.

What you'll do

• Contribute to the design, implementation, and hardening of enterprise security controls across endpoint, identity, network, and data domains
• Help configure, tune, and maintain security platforms (EDR, IAM, DLP, PKI, email security)
• Write automation and tooling in Python and Go to reduce manual work across one or more of these domains
• Support device hardening and endpoint security baselines across macOS, Linux, and Windows
• Contribute to network security projects — segmentation, DNS security, VPN/Tailscale, 802.1x
• Assist with vulnerability management: triage, prioritization, and remediation tracking
• Participate in the team's on-call rotation
• Partner with IT and Engineering on scoped security initiatives

Required qualifications

• 7+ years of hands-on experience in enterprise/corporate security engineering — specifically employee-facing systems, endpoints, identity, and internal infrastructure
• Working proficiency in Python and Go, used for real automation or tooling
• Hands-on experience with multiple of the following, with working familiarity across the rest: EDR, IAM, DLP, email security, vulnerability management, network security, PKI
• OS security experience across Linux and macOS at minimum; some Windows exposure
• Ability to take a scoped project from requirements to shipped, with light guidance rather than close oversight
• Exposure to SIEM and detection pipelines (log queries, basic detection logic)

Desirable qualifications

• Experience with Tailscale, 802.1x, or similar zero-trust network access tooling
• Familiarity with HashiCorp Vault or another secrets/PKI platform
• Familiarity with cloud technologies and security (e.g. AWS, GCP, Azure)
• Familiarity with LLM-based AI tools, including agentic workflows and MCP
• NIST CSF / MITRE ATT&CK / CIS Benchmarks familiarity
• Industry standard security certifications such as Security+ or CISSP

Pay

For roles based in Seattle, WA, San Francisco, CA, and Mountain View, CA: $162,000 - $260,000 per year. For roles based in Bozeman, MT: $146,000 - $234,000 per year. The successful candidate will also be eligible for an annual bonus, equity compensation, and benefits.

Schedule

Hybrid work environment — in office at least 3 days per week.

This response is AI-generated, for reference only.