Staff Information Security Engineer

Help Secure Our AI-Powered Conversation Intelligence Platform

Are you passionate about building secure, scalable, and resilient systems that protect an industry-leading SaaS platform? At Invoca, our Security Engineering team is at the core of our mission, ensuring our platform and data remain trustworthy, resilient, and protected against evolving threats. We are looking for a collaborative and innovative Security Engineer to help us tackle complex challenges in application and cloud security, vulnerability management, and automation that enables our teams to move quickly without sacrificing safety.

About Our Information Security Team: A Culture of Empowerment and Ownership

Our Security & Compliance team builds trust and resilience into everything we do at Invoca. We embed security and compliance into our products and operations, enabling the company to move quickly and confidently without sacrificing safety. By combining security engineering expertise with compliance excellence, we protect our platform, meet and exceed industry standards, and empower innovation. If you’re passionate about solving complex challenges, driving a security-first mindset, and helping build a culture of trust, you’ll find a home here.

This role reports to the Manager of Security.

How You'll Make an Impact:

• Architect for Security at Scale: You will be a key contributor in building and securing the infrastructure and applications that power our SaaS platform, ensuring solutions are robust, scalable, and resilient against evolving threats.
• Champion Security by Design: You’ll embed security throughout the SDLC, ensuring secure architecture, coding, and deployment practices. You will drive adoption of scalable, testable, and observable security controls, enabling teams to build and maintain systems that are both resilient and compliant for the long term.
• Lead Complex Problem-Solving: Help guide other teams through identifying, evaluating, and solving risk-based, high-impact security challenges, breaking down large initiatives into achievable outcomes.
• Drive Security Initiatives: You’ll take ownership of department-level projects, drive prioritization of security work, and deliver solutions that balance risk reduction with business value.
• Mentor and Elevate the Team: You will mentor and coach other engineers, share expertise in security engineering, and help grow the next generation of security leaders.
• Ensure Resilience and Response: You’ll contribute your expertise to incident response, vulnerability management, and defensive strategies, ensuring the organization can detect, respond to, and learn from security events.

What You'll Bring to the Team:

We’re looking for a leader who combines deep technical expertise with strong collaboration skills and a passion for solving complex security problems.

• Professional Experience: You have 6+ years of experience in security engineering or a related software engineering discipline, with at least 2+ years leading large-scale security initiatives or cross-functional projects.
• Technical Mastery: You bring expertise in core security principles, vulnerability management, automation, and defensive security strategies. You’re comfortable navigating modern cloud-native environments and security architectures.
• Leadership and Initiative: You’ve led significant security projects at scale, proactively removed roadblocks, and influenced technical strategy at the department or organizational level.
• Collaborative Mindset: You excel at communicating with both technical and non-technical stakeholders, building consensus across teams, and presenting security trade-offs in a clear, actionable way.
• Mentorship and Influence: You have a track record of mentoring engineers, contributing to a culture of learning and trust, and elevating the technical excellence of your teams.
• Continuous Learning: You are passionate about staying ahead of security trends, evolving industry practices, and developing new areas of technical expertise.
• Compliance Awareness: Experience supporting compliance with frameworks like SOC 2, ISO 27001, or PCI DSS is a plus.

Technical Expertise

You have demonstrable experience with many of the following technologies or highly similar alternatives:

• Cloud Security: Deep experience with cloud-native platforms (at least AWS or GCP), including IAM, networking, encryption, and monitoring.
• Infrastructure as Code Security: Familiarity with securin