From the listing
About the role
Lumos is the industry's first Autonomous Identity Platform, providing software that acts on access risk for companies like GitHub, MongoDB, and Pinterest. The platform connects apps, identities, and data through a self-service AppStore and Albus, an AI agent for identity management.
As a Senior Security Engineer, you will shape the identity platform relied on by thousands of IT and security teams. You will build core security foundations and serve as a trusted voice for large customers regarding data safety.
What you'll do
- Design and ship core security platform systems such as request context propagation, scoped API tokens, and authorization services.
- Lead multi-sprint security projects end to end, coordinating with engineers across teams.
- Run security architecture reviews and threat models for new products and turn findings into prioritized work.
- Drive least-privilege access to internal production systems including databases, data pipelines, AWS IAM, and secrets.
- Triage, route, and fix vulnerabilities from pentests, cloud assessments, and dependency scanning.
- Participate in security on-call and incident response while answering security questions from customers and prospects.
What they're looking for
- 5+ years of software engineering experience, with at least 3 focused on security (application, product, or platform security).
- Track record of designing, shipping, and operating production security systems such as authentication frameworks and secrets management.
- Strong backend skills, preferably in Python, TypeScript, or Go.
- Clear written communication for explaining risks and trade-offs to engineers, PMs, and customers.
- Hands-on experience with threat modeling, secure design review, and fixing vulnerabilities in a real codebase.
- Experience securing cloud infrastructure on AWS, including IAM and Infrastructure as Code.
Nice to have
- Identity protocols (OAuth 2.0, OIDC, SAML, SCIM).
- Policy engines (OPA, Zanzibar-style models, Cedar).
- Experience in SOC 2 or ISO 27001 environments.
- General background in IAM and/or growth-stage startup experience.
From the company page
Lumos benefits
◉ Remote policy · in their words
“Remote by design, connected by intention. We’re 100% remote, but deeply united.”
Pulled from their careers page · verified by Atlas
The hot takeJeff's read on Lumos
I like A LOT about what I see from Lumos, including their 4.7 Glassdoor rating, full medical benefits, wellness stipends, and $1k annual learning and development stipends.
The only thing (in my mind) that keeps Lumos from moving into the top tier of work-from-anywhere companies is their +/- 4 hour PST timezone restriction. That covers a lot of territory, but would limit digital nomads to only travel in the Americas. It's not clear whether or not you have to be physically located within the +/- 4 hour window, or if they will let you work those hours from anywhere. 🏋🏾♀️ Health and wellness: $100 bucks a month for health and wellness spend.
👶🏾 Parental leave: Up to 4 months of it. 📚 Learning budget: $1,000 bucks a year on learning and development spend. 🌴 Unlimited PTO: But make sure you actually use it!