Latest AI JobsBrowse Jobs
Zello logo

Security Engineer- Application & Cloud

ZelloAustin, TexasEngineering
Apply on company site
Salary
Not listed
Job type
Full-time
Work mode
Remote
Posted
29 Sept 2026
Status
Open · checked 7d ago

About this role

Zello is seeking a Security Engineer - Application & Cloud to join the engineering team on a remote basis in Austin, Texas. This hands-on technical role suits an automation-focused security professional eager to scale protective operations using artificial intelligence.

Role Overview

As the second security engineer at Zello, this position shares an operate and build rotation with the Director of Security Engineering. The main objective centers on building automation that scales security without increasing headcount. Key deliverables for the first year include finishing the Google Cloud hardening project, rolling out supply chain security controls, launching an automated vulnerability triage pipeline, and reducing critical vulnerability backlogs to zero.

Key Responsibilities

Handle interrupt duties such as findings triage, access questions, security incidents, and customer security assessments during rotation periods, alternating with protected build time.
Tune the internal AI security reviewer and triage agents while establishing clear boundaries for human oversight.
Design and implement an intake pipeline that routes security findings from bug bounties, audits, penetration tests, and AI reviewers directly to code-owning teams.
Lead comprehensive Google Cloud hardening initiatives encompassing identity and access management, organization policies, and workload configurations.
Deploy code scanning and supply chain controls within GitHub and CI/CD pipelines to ensure actionable remediation for engineering teams.
Review application code and system designs touching identity, authorization, and tenancy.
Author clear runbooks and technical requirements to empower other team members to execute security processes independently.

Requirements

Demonstrated experience building and shipping functional security automation in production code.
Practical background applying large language models or autonomous agents to real-world security tasks.
Ability to read application code to identify exploitable flaws regarding authorization, secrets, or identity, and clearly communicate fixes to developers.
Experience implementing CI/CD security scanners that drive actual code fixes rather than passive dashboards.
Strong background securing identities, access, and workloads in major cloud environments, specifically GCP, AWS, or Azure.
Proven capability to collaborate with unmanaged engineering teams to ship security resolutions successfully.
Agility to switch smoothly between incident response mode and focused build mode.

Skills and Tools

Cloud Platforms: AWS, GCP, Azure
Security Controls: SCA, SAST, secrets scanning
Code Repositories and CI/CD: GitHub

Salary and Benefits

Competitive compensation package including equity with significant upside potential
Flexible schedules and flexible time off to promote work-life balance
Sabbatical program provided after every five years of service
Office perks including free snacks and a ping-pong table for local team members

About the Company

Zello operates a voice-first communication platform powered by industry-leading push-to-talk technology, serving over 175 million users globally. The platform connects frontline workers, healthcare professionals, utilities, retail teams, and public safety personnel, providing critical communication support during emergencies across the globe.

How to Apply

To apply for this position, please visit the official Zello careers page to submit your application details directly through authorized company channels.

Skills and tech stack

AWSGCPAzure

Questions candidates ask

Is this position remote?

Yes, this role is listed as remote with a company location based in Austin, Texas.

What cloud platforms are relevant for this role?

Google Cloud Platform (GCP) is ideal, while experience with AWS or Azure is also acceptable.

Does this role involve managing people?

No, this is an individual contributor role focused on engineering automation, not people management.

What is the primary focus of the first year?

The first year focuses on completing the Google Cloud hardening project, deploying supply chain security tools, launching an automated vulnerability triage pipeline, and reducing open high-severity findings past SLA to zero.

Are compliance and GRC responsibilities part of this job?

No, governance, risk, and compliance programs are handled separately by the CISO.

Ready to apply?

The application is on the official Zello careers page.

Apply on company site