This is a highly technical role as a Senior Security Engineer focused on threat modeling and security architecture reviews for Azure-based, API-driven systems. The successful candidate will lead threat modeling, perform security architecture and design reviews, and identify design flaws and risks. Strong security, Azure, and technical skills are required.
Key Highlights
Key Responsibilities
Technical Skills Required
Benefits & Perks
Nice to Have
Job Description
Company: Symosis Security
Location: US-based, Remote
Compensation: $80,000 – $110,000
Company Description
Symosis Security empowers enterprises to build intelligent, secure, and resilient systems by integrating cybersecurity, AI, and secure engineering. The company specializes in advanced threat protection, SaaS and cloud posture management, red teaming, AI risk mitigation, and security automation. Trusted by both public and private sector organizations, Symosis Security assists in assessing vulnerabilities, implementing Zero Trust strategies, and operationalizing recognized cybersecurity frameworks like NIST, ISO, and CIS. With a proactive approach, Symosis Security helps clients navigate digital transformation and tackle evolving threats with confidence.
Role Description
We’re looking for a hands-on Senior Security Engineer focused on threat modeling and security architecture reviews for Azure-based, API-driven systems. This is a highly technical role working directly with engineering teams to identify design-level risks and drive secure-by-design solutions.
This is not a compliance or questionnaire-heavy role.
What you'll Do
- Lead threat modeling (STRIDE or equivalent) for cloud-native systems
- Perform security architecture and design reviews for:
- Azure services
- APIs and microservices
- SaaS and third-party integrations
- Identify design flaws, trust boundary issues, and data exposure risks
- Provide clear, implementable mitigation guidance to engineers
- Review identity, authentication, authorization, and API security designs
- Collaborate with engineers on secure data pipelines and integrations
- Document findings concisely and track remediation
Interested in remote work opportunities in Devops? Discover Devops Remote Jobs featuring exclusive positions from top companies that offer flexible work arrangements.
Required Qualifications
- 5+ years of experience in security engineering or security architecture
- Strong hands-on experience with threat modeling
- Deep understanding of Azure cloud architectures
- Experience securing APIs and cloud-native systems
- Strong grasp of IAM, secrets management, and secure system design
- At least one active security certification
Browse our curated collection of remote jobs across all categories and industries, featuring positions from top companies worldwide.
Preferred Qualification
- Prior software development experience (backend, platform, or cloud-native)
- Ability to read, understand, and reason about application code
- Experience supporting or building data pipelines (e.g., cloud data flows, integrations, ETL-style systems)
- Experience with Azure services such as Entra ID, App Services, Functions, AKS, Key Vault
- Experience reviewing SaaS and third-party cloud integrations
- Scripting or automation experience (Python preferred)
- Preferred certifications: CISSP, CISA, CISM, or equivalent
Why Symosis
- Engineering-first security work (no checkbox compliance)
- Direct influence on system and architecture decisions
- Small, high-impact team with minimal bureaucracy
- Fully remote and flexible work environment
Similar Jobs
Explore other opportunities that match your interests
Oliver James
ocho
