Senior Security Engineer

Our Engineering Standards at Karbon:

Balance Speed and Quality

Engineers are expected to balance delivery speed with a strong commitment to quality, meeting agreed timelines while producing reliable, maintainable, and well-tested solutions. Sound judgment in making trade-offs between velocity and long-term sustainability is essential.

Collaborate Effectively

Engineering is collaborative by default. Team members are expected to contribute constructively in design discussions, reviews, and planning, communicate clearly about progress and risks, and support shared team outcomes in both hybrid and distributed environments.

Build and Maintain Systems

Engineers are responsible for building new capabilities while maintaining and improving existing systems. This includes designing scalable solutions, reducing technical debt, supporting operational stability, and contributing to continuous improvement.

Operate with Autonomy

A high degree of autonomy is expected. Given clear objectives, engineers should independently translate problems into actionable technical approaches, proactively identify improvements, and continuously expand relevant technical expertise.

Ownership and Accountability

Ownership is fundamental. Engineers are accountable for the quality, performance, and customer impact of their work from design through post-release support, and are expected to follow through on commitments.

AI-Enabled Engineering

AI is reshaping how software is built, and we are committed to leveraging it as a force multiplier for creativity, impact, and capability. Engineers are expected to confidently apply strong technical fundamentals while embracing AI tools and approaches to enhance productivity, problem-solving, and innovation. Curiosity, adaptability, and enthusiasm for integrating AI into meaningful product development are essential.

Contribute to Team Culture

Engineers contribute positively to a culture of professionalism, transparency, low bureaucracy, and mutual respect, strengthening team performance through authenticity, curiosity, and collaboration.

About the Role! 

Seeking a development & cloud focused Senior Security Engineer to join our expanding security team.

The ideal candidate will have passion for AppSec, Cloud and AI. They will be a skilled communicator and relationship builder capable of promoting and building security practices across the organization and into our development processes.

AI is reshaping practices across the board and at Karbon we’re fully committed. We don’t see AI as a replacement but as a force multiplier. We’re looking for Security Engineers who are confident in network & security fundamentals, driven to grow, and excited by the challenges and opportunities AI brings.

What You’ll Own:

• Partner with different areas within Karbon - You will make sure security is embedded from the start from feature design and development to participating in design reviews and threat modelling.
• Balance Security and Delivery - You know how to balance delivery needs with security and can communicate security risks and issues to non technical stakeholders. You understand when it's important to push back, when to compromise and how to work with delivery teams to reach a great outcome.
• You keep up to date on the latest technologies and approaches - You are excited by the new developments such as AI bring to security but also understand the importance of security foundational practices such as good account hygiene, least privilege, attack surface reduction and MFA.
• Identify and assess security risks introduced by AI tools - You’ll assist with reviewing the risks of AI tooling usage & Integration and AI-generated code.
• Apply AI-assisted tooling to accelerate security work - you understand the impact AI can have and utilize it across many areas including triage, threat detection, code review, and documentation.
• Flexibility and confidence to work across multiple security domains - We’re a small team responsible for Security at a fast moving company and you’ll get exposure to many different security domains; you could be assisting with refining and investigating corporate IT security processes in the morning, reviewing a cloud hosted system after lunch and then tweaking detection rules!
• Work effectively as part of a team - Security is a team sport and you understand the need to build relationships and trust across the organization to enhance Karbon’s security posture. You are happy to answer questions and offer advice to teams that will reach out for your assistance.
• Own your work - You take pride in your work, feeling a deep sense of responsibility for the products we develop and ensuring we keep our customers' valuable data secure. This sense of ownership is paramount, and you share this commitment.
• Bring your passion and personality - Your creativity, curiosity, and authentic self make the team stronger. If you've worked in highly political environments, you'll find our culture, free from office politics and valuing openness and authenticity, a refreshing change.
• Help us measure improvement and steer our roadmap - Contribute to Security Metrics so we can track progress and feedback into our roadmap.

What Sets You Apart

4+ years experience in a security or development role across most of the following:

• Collaborating with teams to review designs & implementations for security issues and embedding good security practices across software development
• Triaging issues and reports, assisting teams to remedy items and testing fixes
• Working with external penetration test companies to validate and prioritize findings
• Conducting risk and vulnerability assessments of web applications and APIs and third party suppliers and integrations
• Configuring and tuning SAST, SCA and DAST Tooling
• Working with build/deployment pipelines to incorporate security tooling (Github Actions or Azure Devops YAML based pipelines)
• Assisting with implementing security focused alerting and detections and automations
• Conducting and facilitating organizational & developer focused security training
• Assisting with operational security items such as EDR alerts and MDM
• Contributing to our security roadmap

In addition you’ll need:

• Strong communication skills (spoken and written) 
• Some of the following Languages/Frameworks: Microsoft .NET/C#, JavaScript (we use React and EmberJS frameworks and, Python)
• At least one cloud platform: Azure, AWS or GCP (we use Azure predominantly)
• Working knowledge of PowerShell or Bash and Python
• Working knowledge of at least one AI development tool e.g. Claude Code, GitHub Co-Pilot etc
• Portswigger Burp or similar
• Certifications such as Offsec OSCP & AWAE, GIAC, Burp Practitioner, PJPT, Microsoft/AWS development and cloud related are nice to have
• Experience with securing AI applications, systems and AI tooling would be highly regarded

Why Work at Karbon?

• Gain global experience across Australia, New Zealand, UK, and Canada
• Strong benefits package including:
• Flexible Time Off with an encouraged 4 weeks use per year
• Company paid medical for you and eligible spouse/partner and dependents
• Paid dental and vision and eligible spouse/partner and dependents
• 401(k) with company matching
• Flexible Spending Account
• Up to 8 weeks paid parental leave
• Work-from-home stipend
• Work with (and learn from) an experienced, high-performing team
• A collaborative, team-oriented culture that embraces diversity, invests in development and provides consistent feedback
• Be part of a fast-growing company that firmly believes in promoting high performers from within

About Us

We’re a combat-tested group of engineers, operators, and entrepreneurs who believe America’s edge depends on autonomous airpower that’s trusted and deployable today, not in 2040. Backed by tier-one investors, we’ve secured the runway - financial, regulatory, and literal - to move at startup speed while tackling a national-security mission that matters. We’ve structured the company for radical ownership: no silos, no “systems integrator” overhead, just tightly knit mission-focused IPTs that live and breathe the hardware and code they ship.

If you thrive where hard-tech ambition meets national-security urgency, you’ll build faster here than anywhere else. Let’s get after it.

Culture That Ships

Strong Core Values, Startup Execution. Integrity, Service Before Self, Excellence, Honor, Courage, Commitment—powered by a bias for action and a “figure it out” mindset.

Self-Starters Only. You’ll have clear objectives, a blank sheet of paper, and the trust (plus capital) to move fast. Bureaucracy stays out of your way.

One Team, No Tourists. Whether you’re tuning a control law at 2 a.m. or heat-treating a Ti-6Al-4V spar, everyone sweats the details. We celebrate wins together and own failures together.

What’s In It for You

Mission With a Pulse. Every line of code, bracket, or test you deliver expands the toolbox of the warfighter on Day 1 of a conflict.

Resources Without Red Tape. VC speed + DoD customer pull: access to test ranges, flight hours, and operator feedback while retaining startup agility.

Career-Defining Upside. Significant equity, best-in-class benefits, and the chance to see your product deliver in months, not decades.

About the Role 

We're looking for a System Administrator / IT Lead to be the first internal IT hire. You'll shape not just how the environment runs today, but how it's designed and governed going forward. The immediate work is operational: standing up and managing our Microsoft 365 environments (commercial and government) alongside our MSP, working with the MSP and internal security and compliance teammates to maintain the technical requirements of our CMMC L2 posture. The longer arc is bigger: defining how IT operates as a function as we grow. We plan to hire additional IT staff and want someone who can help think through what that team looks like, but this is not a management requirement. If you want to stay hands-on later, you can.

What You'll Do

• Serve as the internal technical owner for our Microsoft 365 commercial and GCC-High environments, administering identity, device management, and productivity tooling.
• Act as the primary internal counterpart to our MSP, coordinating on network operations, changes, and issue resolution while maintaining internal accountability for outcomes.
• Work with security and GRC to maintain configuration management practices aligned to NIST 800-171 technical controls, with an eye toward repeatability, auditability, and scale.
• Contribute to IT architecture decisions, including environment design, tooling selection, and segmentation strategy as the company scales.
• Build out IT operational documentation, runbooks, and procedures that can support future hires and reduce single-point-of-failure risk.
• Partner cross-functionally with compliance, security, and engineering to ensure technical decisions align with regulatory requirements and business needs.

What You'll Bring

• 7+ years of systems administration experience with meaningful depth in Microsoft cloud environments (Intune, Entra ID, Purview, Exchange Online).
• Hands-on experience with NIST 800-171 control implementation in a technical capacity.
• Demonstrated experience with configuration management practices and tooling across Windows and Linux environments.
• Experience managing or coordinating with an MSP, including holding vendors accountable and supplementing coverage where needed.
• Able to lead environment design conversations, not just execute on them.
• Strong documentation habits and communication skills suited to a cross-functional environment where IT is one piece of a broader compliance and security program.
• Experience taking charge of efforts and setting a direction.
• U.S. citizenship required

Bonus Points

• Experience working in GCC-H.
• Experience with multi-cloud environments (e.g., AWS and Microsoft)
• Interest in eventually building and leading an IT team as the company grows.
• Experience with segregated environments (OT, manufacturing, hardware test) is a big plus.
• Experience designing or evolving IT programs at a startup or high-growth company.
• Scripting or automation experience (PowerShell, Bash, Python) to support configuration management and operational efficiency.
• Current clearance (Secret or above)

Why You’ll Love Working Here (Compensation and Benefits)

Base Salary: $140,000 to $190,000 USD

The salary range for this role is an estimate based on a wide range of compensation factors, inclusive of base salary only. Actual salary offer may vary based on (but not limited to) work experience, education and/or training, critical skills, and/or business considerations. Highly competitive equity grants are included in the majority of full time offers; and are considered part of Atropos's total compensation package. Additionally, Atropos offers top-tier benefits for full-time employees, including:

• Platinum Healthcare Benefits: Atropos offers comprehensive medical, dental, and vision plans with 100% employer-paid premiums and little to no cost to you
• Basic Life/AD&D and long-term disability insurance 100% covered by Atropos, plus the option to purchase additional life insurance for you and your dependents
• Unlimited PTO, with minimum of 15 days enforced
• 20 weeks of paid Caregiver & Wellness Leave to care for a family member, bond with your baby, or tend to your own medical condition
• Family Planning & Parenting Support: Fertility (eg, IVF, preservation), adoption, and gestational carrier coverage with additional benefits and resources to provide support from planning to parenting
• Mental Health Resources: We provide free mental health resources 24/7 including therapy, life coaching, and more. Additional work-life services, such as free legal and financial support, available to you as well
• Tuition and professional development reimbursement for STEM, MBA, and licenses
• In-Office Daily Lunch catered 
• Company-funded child care stipend 
• Company-funded commuter benefits available based on your region.
• Relocation assistance (depending on role eligibility).
• 401(k) retirement savings plan - both a traditional and Roth 401(k). 6% employer matching contribution

The recruiter assigned to this role can share more information about the specific compensation and benefit details associated with this role during the hiring process.

Atropos is an equal-opportunity employer committed to creating a diverse and inclusive workplace. The Atropos team is made up of incredibly talented and unique individuals. All qualified applicants will be treated with respect and receive equal consideration for employment without regard to race, color, creed, religion, sex, gender identity, sexual orientation, national origin, disability, uniform service, Veteran status, age, or any other protected characteristic per federal, state, or local law, including those with a criminal history, in a manner consistent with the requirements of applicable state and local laws. We actively encourage members of recognized minorities, women, Veterans, and those with disabilities to apply, and we work to create a welcoming and supportive environment for all applicants throughout the interview process. If you are someone who is interested in disrupting the way the Department of Defense buys and operates unmanned weapon systems, please apply!

At Rockstar Games, we create world-class entertainment experiences. 

Become part of a team working on some of the most rewarding, large-scale creative projects to be found in any entertainment medium - all within an inclusive, highly-motivated environment where you can learn and collaborate with some of the most talented people in the industry.

Rockstar Games is on the lookout for a Build Engineer who possesses a passion for automating processes and supporting infrastructure and tools that support the deployment of client-facing software and services. 

This is a full-time, in-office position based out of Rockstar’s game development studio in Andover, Massachusetts. 

WHAT WE DO

• The Rockstar Games Online Services Team is a passionate development group, focused on growing and maintaining the technology platform that powers Rockstar’s online titles and our ability to deliver world-class player experiences. 
• We design and maintain CI/CD pipelines enabling fast, safe, and repeatable software delivery across all environments. 
• Collaborate with development, operations, security and QA teams to support the development and delivery of robust, high-quality software. 

RESPONSIBILITIES

• Continuous integration and deployment of internal tools and externally facing applications to multiple environments. 
• Management and documentation of deployment processes and automation. 
• Environment management to ensure all needs are covered for testing and development. 
• Collaboration with other Rockstar technology teams across our worldwide studios. 

REQUIREMENTS

• 5+ years of configuration management and engineering for web applications, ideally supporting an Agile development process.
• Experience with automated build tools such as TeamCity, Jenkins, or equivalent.
• Experience defining, implementing, or improving continuous integration and deployment processes.
• Programming experience with an OOP language such as C# or Java.
• Automation skills utilizing a scripting language such as PowerShell, Bash, Python, or similar.
• Knowledge of distributed systems architecture and infrastructure.  
• Adept at managing software release and deployment.
• Proficient in supporting multi-platform application development shops.
• Experience with containerization technology (preferably Docker).
• Experience with source control such as GitHub or Perforce.
• Experience with bug-tracking software.

PLUSES

Please note that these are desirable skills and are not required to apply for the position. 

• Experience with branch and merge strategies. 
• Experience with frontend technologies such as React, NextJs, Webpack or similar. 
• Knowledge of SQL. 

HOW TO APPLY

Please apply with a resume and cover letter demonstrating how you meet the skills above. If we would like to move forward with your application, a Rockstar recruiter will reach out to you to explain next steps and guide you through the process. 

Rockstar is committed to creating a work environment that promotes equal opportunity, dignity and respect. In line with this commitment, Rockstar will provide reasonable accommodations to qualified job applicants with disabilities during the recruitment process in order for such applicants to be considered for the position for which they are applying, as well as to qualified employees to enable them to perform the essential functions of their roles. If you need more information about Rockstar’s reasonable accommodation policies or process, or need to request an accommodation, please notify your recruiter during the interview process. 

If you’ve got the right skills for the job, we want to hear from you. We encourage applications from all suitable candidates regardless of age, disability, gender identity, sexual orientation, religion, belief, race, or any other protected category.

#LI-SD1