Skip to content

Open nowPosted 9 hours ago

Security Engineer

Vibes6 open roles

Pay
$110,000 – $120,000 a year
Where
Chicago, IL (Hybrid)
Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSecurity EngineerVibes · Chicago, IL (Hybrid)
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Vibes's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.5% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.3%1 day
  2. 4.6%3 days
  3. 13.5%7 days
  4. 21.8%14 days
  5. 36.6%30 days
  6. 58.9%60 days
This job: posted 9 hours ago

The posting

About Vibes

Vibes’ mobile-first platform creates personal, revenue-driving and long-term mobile engagement between consumers and the world-class brands they love. Industry leaders like Chipotle, Kohl’s and Polo Ralph Lauren use Vibes to grow customer relationships with relevant, high-volume mobile messaging and mobile wallet marketing on a global scale. Vibes enables marketers to seamlessly connect with their customers using a data-rich and API-packed solution that beautifully optimizes and unifies their SMS, MMS, RCS and Mobile Wallet campaigns. To learn more about Vibes, visit www.vibes.com.

Vibes is building a security program that covers the whole company: our cloud environment, our applications, our workforce, and the AI tools and agents we increasingly rely on. As a Security Engineer, you'll build, run, and improve the controls that protect all of these. You'll work hands-on in cloud infrastructure and code, partner closely with engineering, IT Support, and GRC, and help shape how we adopt AI securely and use it to make security work faster.

This is a generalist role with real ownership. You'll do the engineering work and also explain risk and drive remediation across teams. This role will report to the Senior Security Engineer.

What you'll do:

Cloud and infrastructure security

  • Engineer, operate, and improve controls that protect our cloud environment, including network, identity, logging, encryption, and configuration baselines
  • Improve security tooling coverage so every active project and account reports into a single view, and track and close coverage gaps
  • Define guardrails and secure defaults that make the safe path the easy path for engineering teams

Vulnerability management

  • Run vulnerability management end to end: ingestion, triage, prioritization by real-world risk, assignment, and closure
  • Work with remediation owners to agree on timelines, unblock fixes, and handle exceptions
  • Report on SLA performance, backlog age, and risk trends to security leadership

Detection and incident response

  • Tune detections to improve signal and reduce noise, and respond to security events as they arise
  • Write, maintain, and rehearse incident response runbooks
  • Plan and run tabletop exercises, and turn lessons learned into concrete improvements
  • Take part in the security on-call rotation [if applicable]

Identity and access management

  • Build and improve how access is granted, reviewed, and removed, including group-based access, provisioning automation, and periodic access reviews
  • Own the security steps in joiner, mover, and leaver processes, working with GRC and IT Support
  • Apply least privilege, role-based access, and SSO consistently across people, service accounts, and agent identities

Secure development and code review

  • Review code and infrastructure-as-code changes for security risk before they reach production
  • Turn recurring findings into reusable patterns, secure templates, and automated checks (for example, in CI/CD)
  • Coach engineers on why a finding matters and how to fix it

AI security and AI-enabled security

  • Use language models and agents within the company to strengthen workforce security, such as triage, investigation support, and policy and access workflows
  • Support securing an agentic, AI-leaning software development lifecycle, including controls around AI-generated code, agent permissions, and review gates
  • Assess the security of AI tools and agents, whether bought or built, including how models and agents reach company systems and data (access scope, data handling, credential management, logging, and prompt-injection and data-exfiltration risk)

Communication and partnership

  • Explain risk clearly and credibly to engineers, executives, and auditors, adjusting depth and framing for each
  • Support audits and compliance evidence requests in partnership with GRC [e.g., SOC 2, ISO 27001]

What you'll bring:

Required

  • 3+ years of cybersecurity experience at a SaaS company, or equivalent
  • Hands-on security engineering experience in a cloud environment; AWS preferred
  • Comfort reading code and infrastructure as code (e.g., [Terraform/CloudFormation]; [Python/Go/TypeScript]), spotting security issues, and giving constructive review feedback
  • Practical experience with vulnerability management and incident response
  • Solid understanding of IAM principles: least privilege, RBAC, SSO, access reviews, and the joiner/mover/leaver lifecycle, as applied to people, service accounts, and agent identities
  • Working knowledge of where AI systems introduce risk and where they reduce work
  • Strong written and verbal communication, including the ability to explain a risk to any audience

Preferred

  • Relevant certification, such as CISSP or an AWS security certification
  • Experience with [SIEM / EDR / CSPM / vulnerability scanning / IdP] tooling
  • Experience automating security workflows with scripting or APIs
  • Hands-on experience evaluating or building LLM-based applications or agents
  • Familiarity with frameworks such as NIST CSF, CIS Benchmarks, OWASP (including the LLM Top 10), or MITRE ATT&CK
  • Experience running tabletop exercises or leading incidents

Our Core Values:

  • Respect, honesty, and integrity for all stakeholders
  • Always be learning
  • Relentless focus on the customer
  • Never be satisfied
  • Create value
  • Seek accountability and ownership

Compensation and Benefits

The base salary for this role is $110,000 - $120,000 annually. Final compensation for this role will be determined by various factors such as a candidate's relevant work experience, skills and certifications. Vibes offers employees a full slate of benefits including competitive salaries, options, medical, dental and vision coverage, short and long term disability, life insurance, 11 paid holidays, flexible vacation, commuter benefits, a 401(k) plan and match, and a paid parental leave program.

Equal Opportunity Employer

Vibes is proud to be an Equal Opportunity Employer and provides equal employment opportunities to all employees and applicants regardless of race, color, religion, gender, gender identity, age, national origin, disability, parental or pregnancy status, marriage and civil partnership, sexual orientation, veteran status, or any other characteristic protected by law. Reasonable accommodations will be made to meet the requirements of the Americans with Disabilities Act and will be provided as requested by candidates taking part in all aspects of the selection process.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Vibes's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Vibes's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Vibes's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.