Senior Security Engineer
This is the employer's own posting, not a copy on a job board.
What we know
Is it still open?
Confirmed still open
Last checked 2d ago — checked against the employer's own applicant tracking system, which is the company answering directly.
We re-read the employer's own applicant tracking system and the posting was still there. That is the company answering directly.
How old is it?
Posted 6d ago
The date the source published, not the day we noticed it (2026-10-26). Last seen at its source 3h ago.
We have tracked this listing since 26 Oct 2026 (6 days). The employer's own board has carried it every time we have read it, most recently 3 hours ago.
Is it remote?
Remote
That is the location the employer filed this posting under. Quoted as written — we do not re-word the source's own location.
Who may apply?
Not stated
The description states no restriction of its own. This is the source's own tag.
Pay
$180k–240k/yr
Published by the source in its own salary field. Shown in the posting's own currency and period; we never convert.
Skills named in the ad
Recognised terms only, from a fixed vocabulary — this is what CV matching compares against.
Carried by 1 source
-
Ashby employer's own board first seen 6d ago · last seen 3h ago
The listing
Who We Are
MOXFIVE is building technologies that leverage AI to streamline the response, recovery, and resilience from cyber-attacks in enterprises. We are looking for a talented Senior Security Engineer to join as a core member of our founding engineering team, where you will own the security of the platforms, cloud environments, and AI systems our customers trust during the worst days of their business.
The MOXFIVE founding team brings over 30 years of combined cybersecurity experience from leading companies such as CrowdStrike, Mandiant, Palo Alto Networks, Crypsis, Illumio, and Expel. Today, we are focused on seizing an opportunity with the potential to disrupt the breach response market.
Who You Are
You're a senior security engineer who is equally comfortable hardening container workloads, tightening cloud identity and access, and running down a suspicious endpoint alert. You think like an attacker, build like an engineer, and treat security as something you ship in code rather than something you write in a policy.
You understand that a company trusted with breach response carries a higher bar than most. You care about protecting highly sensitive data without slowing down the engineers building on it, and you would rather automate a guardrail than review the same mistake twice.
The Impact You'll Have
At MOXFIVE, security is the product. Customers rely on us while they are under attack, and the platforms and AI systems we build must earn that trust every day. You will help design and defend the boundaries that keep their data protected.
You will own security across our cloud infrastructure, AI platforms, and corporate environment, including endpoints, identity, email, and business applications. That means building detection and response for our own environment, driving cloud and container posture to a defensible state, securing the software supply chain, and setting the controls that let us show customers and partners exactly how their data is protected.
What You'll Bring
6+ years of hands-on security engineering experience, with at least 3 years securing production cloud environments
Deep experience securing workloads on major public cloud platforms, including identity and access management, network segmentation, encryption and key management, logging, and organization-level guardrails
Production experience securing container orchestration platforms and containerized workloads, including image hardening, admission control, and runtime protection
Hands-on experience with cloud security posture management, vulnerability prioritization, and cloud workload protection
Hands-on experience with enterprise EDR and XDR platforms, from policy tuning through detection triage and response
Experience building detections and running investigations across cloud, identity, and endpoint telemetry
Strong understanding of identity security, including SSO, MFA, conditional access, and least privilege access for engineers and service accounts
Experience securing CI/CD and the software supply chain, including static analysis, secret scanning, infrastructure-as-code scanning, dependency risk, and artifact integrity
Infrastructure-as-code experience, and the ability to fix what you find rather than file tickets for it
Proficiency in Python or Go for automation, tooling, and detection engineering
Experience with secrets management at scale
Experience securing corporate IT, including device management, endpoint hardening, and email and SaaS application security
Sound judgment handling sensitive, privileged, and regulated data
Nice to Have
Experience in incident response, DFIR, or a managed detection and response environment
Experience securing LLM and agentic AI systems, including prompt injection defenses, action authorization, and isolation of untrusted execution
Experience with Zero Trust access architectures
Experience with multi-tenant SaaS isolation and third-party integrations
Working knowledge of SOC 2, ISO 27001, or similar frameworks, with a bias toward controls that are automated and evidenced continuously
Offensive security, red team, or cloud penetration testing experience
Relevant certifications such as OSCP, GCIH, GCFA, or cloud security specialty certifications