Security Software Engineer, Security & Trust

Whats the opportunity:

As a Security Software Engineer on our Security & Trust  team, you'll build the systems that help mature Aura's security  and compliance  commitments. You'll partner with our Security Assurance Manager , who owns our compliance frameworks and audit program, and be responsible for turning those requirements into automated, enforceable technical controls: policy-as-code in our pipelines, continuous monitoring across our cloud environments, and scalable workflows that grow with the business.

This is an engineering role first. You don't need a compliance or security background; we'll teach you the frameworks. What we need is someone who writes solid code, thinks in systems, and wants to apply those skills to one of the most interesting problems in security right now.

Day to Day:

Build & Automate:

• Translate security and compliance  requirements, defined with our Security Assurance Manager , into automated technical controls, using policy-as-code enforced in CI/CD and against infrastructure-as-code.
• Build pipelines and integrations that collect compliance evidence directly from our internal systems, so audits run on live data rather than screenshots and spreadsheets.
• Develop continuous monitoring for security controls and cloud environments, integrating with our GRC tooling (e.g., Vanta) and surfacing issues where engineers already work.
• Apply AI and automation to streamline compliance workflows — from intelligent triage of risk assessments to automated evidence gathering and control validation.

Scale the Program:

• Help engineer our Common Control Framework, building a unified structure that serves audits, risk assessments, and vendor reviews from a single source of truth.
• Build the tooling and workflows that let the Security & Trust team operate efficiently as the company grows — automating repetitive processes, improving reporting, and reducing the compliance burden on engineering teams.
• Support audit readiness across multiple frameworks (SOC 2, SOX, ISO 27001) by ensuring evidence is continuously collected, organized, and accessible.

Collaborate:

• Work hand in hand with our Security Assurance Manager , who owns frameworks, policy, and audits, providing the technical implementation and evidence behind our compliance program.
• Partner across business and technical teams to embed security and compliance into existing workflows — our team philosophy is partnership, not mandates.
• Contribute to cross-functional initiatives including vendor risk management, access reviews, and security advisory across the organization.

What you bring to the table:

• 3-5+ years of software engineering experience, ideally in security, infrastructure, backend, Devops or platform engineering.
• Strong proficiency in Python (or a similar language), including writing production-quality, tested code and working with APIs.
• Hands-on experience with AWS (or another major cloud provider), including IAM, networking, and security groups.
• Experience with infrastructure-as-code (e.g., Terraform) and CI/CD pipelines.
•  An automation-first mindset — you see a manual process and immediately think about how to eliminate it.
• Genuine curiosity and a builder’s mentality. You’re energized by standing up new systems, not just maintaining existing ones.
• A self-starter mentality, with the ability to work autonomously, manage competing priorities, and drive projects to completion in a fast-paced environment.
• Strong communication skills. You’ll work closely with non-engineers and need to explain technical concepts to non-technical partners.
• Bachelor's degree in Computer Science or a related field, or equivalent practical experience.

Nice to have:

• Experience with policy-as-code tools such as Open Policy Agent.
• Exposure to ML systems or MLOps tooling, or applying AI to automate business processes.
• Familiarity with security and privacy frameworks such as SOC 2, ISO 27001, PCI, SOX, NIST AI RMF, and EU/US data privacy laws.
• Experience with GRC and ticketing tools such as Vanta or Jira.
• Experience building internal tools, developer platforms, or automation frameworks.

We'd love to hear from you. Please submit your application if you would like to be considered for this opportunity.