Senior Security Engineer

Job description

🗣 Natter harnesses the power of AI and video to give everyone a voice. In early April 2026, Natter announced its Series A https://www.trynatter.com/blog-posts/natter-raises-23m-to-scale-enterprise-ai-conversation-intelligence. $23M raised to define the enterprise conversation intelligence category. Natter is already being used by some of the world’s largest companies including ServiceNow, Accenture, Philip Morris, Lego, PwC, Mondelez, Cox Enterprises, SAP, Miro, Deloitte, Synopsys and many more. Natter’s conversational AI platform allows tens of thousands of users to simultaneously share ideas and feedback through real-time video conversations. Its uniquely scalable tech allows anyone with a smartphone to, literally, have a say on the most important decisions - ranging from workplace strategy to new product offerings. We partner with some of the world’s largest and most complex enterprises (Fortune 500 and equivalent), and are currently growing our team from 30 to 60 employees. LOCATION Remote: GMT or GMT+1, with opportunities for off-sites and in-person collaboration where it makes sense. We’re committed to building a diverse team and welcome people from all backgrounds to apply. If you’re excited about this role and our mission but aren’t sure you meet every qualification, reach out anyway. You may be just the right candidate. THE OPPORTUNITY We’re seeking a hands-on Senior Security Engineer with 4-8 years of experience in high-growth, cloud-native environments to help us enhance and implement security across our tech landscape including web application, cloud infrastructure and endpoints, working alongside our customers, and promote a security-first culture as we scale. As our first dedicated security engineering specialist, you’ll work both operationally and strategically, partnering closely with our Information Security & Risk Management Lead and collaborating cross-functionally with engineering, product, and other teams. You’ll own the technical aspects of security, implement and harden controls, manage threats, respond to incidents, elevate our security posture, ensure a security-first culture and drive strategic improvements and projects as we scale. You’ll also collaborate with our Solutions Engineering Lead on enterprise onboarding, helping customers navigate security, identity, networking, and compliance requirements during technical validation and rollout. RESPONSIBILITIES As a Security Engineer at Natter, you’ll: - Conduct security assessments, threat hunts, code and logs reviews, and penetration testing to identify vulnerabilities in our applications, and drive continuous monitoring improvements. - Design, implement, optimize, and monitor security controls and tooling from the ground up, strengthening security across endpoints, infrastructure, and application CI/CD pipelines. - Collaborate with engineering teams to raise the security bar through reviews, guidance, and automation. - Respond to security incidents in real time - manage containment, remediation, forensics, and root cause analysis. Also participate in tabletop exercises, incident simulations, and coordinate external penetration tests. - Partner with Solutions Engineering to support enterprise customer onboarding, including SSO integrations (SAML/OIDC), network allowlisting, and security reviews. - Join customer-facing technical and security discussions where needed, acting as a trusted security point of contact. - Risk Management: support the Information Security & Risk Management Lead with vendor security assessments to evaluate third-party risk, and ensure Natter meets its present and future regulatory and certification requirements (GDPR, ISO 27001, ISO 42001 etc.). - Stay current on emerging threats, vulnerabilities and technologies, and contribute to company-wide security awareness initiatives. WHAT YOU CAN EXPECT - Modern cloud-native stack with the opportunity to influence tooling and architecture. - Immediate impact by choosing and deploying new tooling to enable a fast-growing business. - Customer-facing impact - help unlock enterprise deals and accelerate adoption by reinforcing trust, compliance, and smooth technical onboarding. Security as a sales lever, not a cost. - Autonomy and collaboration - the opportunity to focus on coding/programming and implementation, but also collaborating cross-functionally with other teams such as solutions engineering, product, and GTM. - Growth potential - opportunity to define our security architecture to ensure resilience and security, including HA and ZTNA in a growing global business. - You’ll work with people who are passionate about what they do, supported by leaders who are empowering, supportive and inclusive. WE’D LOVE TO HEAR FROM YOU IF YOU HAVE - 4-8 years in cybersecurity or technical security or solutions engineering roles. - Hands-on experience deploying and managing security tooling - such as EDR, IAM, MDM, SIEM, ZTNA, or vulnerability scanners, and enjoy solving problems at the implementation level. - Strong communication skills and comfortable communicating technical security concepts to non-security stakeholders. - Working knowledge of networking, Windows/macOS, and security protocols. - Experience with security reporting and compliance tools. - Cloud security knowledge (we use AWS). - Proficient in programming languages e.g. Typescript, Python, Bash, or similar. - Strong skills in log analysis, threat investigation, and incident response. - A proactive and solution-oriented mindset, with a bias for action. DESIRABLE It would be a bonus if you have expertise in, or a desire to gain experience in, one or more of the following (note that candidates are not expected to have comprehensive knowledge in all areas) - Hands-on experience with AWS and AWS security services (CloudTrail, GuardDuty, WAF, IAM, Security Hub). - Experience supporting enterprise customers during technical onboarding or security validation. - DAST/SAST tooling and IaC security expertise. - Knowledge of Kubernetes and container security. - Identity & Access Management experience (e.g. Google, Okta). - Experience with JVM languages, Terraform/IaC, CDK, or React. - Familiarity with GDPR, ISO 27001, SOC 2, EU AI Act/LLMs. - Experience delivering audits or using GRC tools (e.g. Drata, Vanta) - Interest in AI and/or knowledge of AI security risks and frameworks (e.g. ISO 42001). - Security qualifications or certifications.