This role is about staying two steps ahead of the people who want to break into our systems. You'll run vulnerability assessments, harden our cloud infrastructure, and work with engineering teams to fix issues before they ship, not after. We want someone who can explain risk to non-technical stakeholders without watering down the actual problem, and who's just as comfortable in a code review as in an audit prep meeting.
What you'll do
- Conduct security assessments and penetration tests against internal and external systems
- Review architecture and code changes for security risks before release
- Harden cloud infrastructure configurations across AWS and Kubernetes
- Build and tune detection rules for suspicious activity and anomalies
- Lead incident response for security events and coordinate remediation
- Own vendor security reviews and support SOC 2 / compliance audits
What we're looking for
- 5+ years in application or infrastructure security roles
- Hands-on experience with penetration testing and vulnerability scanning tools
- Strong understanding of cloud security in AWS or GCP environments
- Familiarity with OWASP Top 10 and secure coding practices
- Experience supporting compliance frameworks such as SOC 2 or ISO 27001
- Ability to communicate risk clearly to engineers and executives alike
Nice to have
- Relevant certifications (OSCP, CISSP, or similar)
- Experience building a security champions program across engineering teams
- Background in incident response for a SaaS company
About Parcelbee
About Parcelbee: We build the routing software and driver network behind last-mile delivery for e-commerce and regional retail brands. Based in Chicago, our team is split between engineers building the routing engine and an operations crew who talk to drivers and customers every single day.
Apply for this roleTakes ~4 minutes · 133 people have applied