✨ Your Responsibilities
Design and ship core security platform systems in the Lumos codebase, such as request context propagation across services, scoped API tokens, our authorization service, and decoupling authentication from synced identities.
Lead multi-sprint security projects end to end, coordinating with engineers on other teams to get them delivered.
Run security architecture reviews and threat models for new products (for example our MCP Governance gateway and on-device policy checks) before they scale, and turn findings into tracked, prioritized work.
Drive least-privilege access to our own production systems (databases, data pipelines, AWS IAM, secrets).
Triage, route, and fix vulnerabilities from pentests, cloud assessments, and dependency scanning, and coordinate retests.
Take part in security oncall and incident response, and help answer security questions from customers and prospects.
🙌 What We're Looking For
5+ years of software engineering experience, with at least 3 focused on security (application, product, or platform security).
A track record of designing, shipping, and operating production security systems, not only reviewing them. Examples: authentication and authorization frameworks, token and session management, secrets management, audit logging.
Strong backend skills. Python and TypeScript are a strong plus. Go is welcome.
Clear written communication. You can explain a risk and a trade-off to engineers, PMs, and customers alike.
Nice to have: identity protocols (OAuth 2.0, OIDC, SAML, SCIM), policy engines (OPA, Zanzibar-style models, Cedar), SOC 2 or ISO 27001 environments, general background in IAM, and/or growth-stage startup experience.
Hands-on experience with threat modeling, secure design review, and finding and fixing vulnerabilities in a real codebase.
Experience securing cloud infrastructure on AWS (equivalent GCP or Azure experience considered), including IAM and Infrastructure as Code.
⭐️ What We Value
We also care about whether you would be a good fit for Lumos based on the values https://blog.lumos.com/p/the-anatomy-of-an-alchemist?open=false#%C2%A7lumos-values-the-anatomy-of-an-alchemist and characteristics that define how we achieve outcomes, not just your resume.
Lumos is an equal opportunity employer committed to building a diverse and inclusive workplace. We do not discriminate on the basis of race, national origin, gender, sexual orientation, gender identity, protected veteran status, disability, age, or other legally protected status. If you require any reasonable accommodations, please let us know at any time.
Thank you for considering Lumos, we hope to hear from you! 🎉
💰Pay Range
$155,000 - $200,000 plus equity + benefits (Note that this range is a good faith estimate of likely pay for this role; upon hire, the pay may differ due to skill and/or level of experience.)
💸 Benefits and Perks
💻 Remote-first culture – Work from anywhere within ±4 hours of Pacific Time.
🏥 Medical, dental & vision insurance – 100% of premiums covered for employees, 60% for dependents. HSA and FSA available with employer contribution. International benefits align with local standards.
🧠 Mental health support – Access to mental health resources and support.
💪 Monthly wellness stipend – A monthly stipend for gym memberships, fitness apps, and whatever helps you recharge.
🛡️ Life & disability insurance – Life insurance, short-term disability, and long-term disability coverage available.
🌴 Flexible PTO – Flexible time off with a minimum annual requirement, because rest is part of doing your best work.
👶 Parental leave – Up to 16 weeks of paid parental leave for expecting parents.
📚 $1,000 annual learning stipend – An annual budget for courses, books, conferences, and certifications.
✈️ Company & team offsites – Company and team bonding trips throughout the year, fully covered by Lumos.
💰 401(k) with matching – Employer 401(k) matching to help you save for the future.