Staff Information Security Engineer

Help Secure Our AI-Powered Conversation Intelligence Platform

Are you passionate about building secure, scalable, and resilient systems that protect an industry-leading SaaS platform? At Invoca, our Security Engineering team is at the core of our mission, ensuring our platform and data remain trustworthy, resilient, and protected against evolving threats. We are looking for a collaborative and innovative Security Engineer to help us tackle complex challenges in application and cloud security, vulnerability management, and automation that enables our teams to move quickly without sacrificing safety.

About Our Information Security Team: A Culture of Empowerment and Ownership

Our Security & Compliance team builds trust and resilience into everything we do at Invoca. We embed security and compliance into our products and operations, enabling the company to move quickly and confidently without sacrificing safety. By combining security engineering expertise with compliance excellence, we protect our platform, meet and exceed industry standards, and empower innovation. If you're passionate about solving complex challenges, driving a security-first mindset, and helping build a culture of trust, you'll find a home here.

This role reports to the Manager of Security.

How You'll Make an Impact:

• Architect for Security at Scale: You will be a key contributor in building and securing the infrastructure and applications that power our SaaS platform, ensuring solutions are robust, scalable, and resilient against evolving threats.
• Champion Security by Design: You'll embed security throughout the SDLC, ensuring secure architecture, coding, and deployment practices. You will drive adoption of scalable, testable, and observable security controls, enabling teams to build and maintain systems that are both resilient and compliant for the long term.
• Lead Complex Problem-Solving: Help guide other teams through identifying, evaluating, and solving risk-based, high-impact security challenges, breaking down large initiatives into achievable outcomes.
• Drive Security Initiatives: You'll take ownership of department-level projects, drive prioritization of security work, and deliver solutions that balance risk reduction with business value.
• Mentor and Elevate the Team: You will mentor and coach other engineers, share expertise in security engineering, and help grow the next generation of security leaders.
• Ensure Resilience and Response: You'll contribute your expertise to incident response, vulnerability management, and defensive strategies, ensuring the organization can detect, respond to, and learn from security events.

What You'll Bring to the Team:

We're looking for a leader who combines deep technical expertise with strong collaboration skills and a passion for solving complex security problems.

• Professional Experience: You have 6+ years of experience in security engineering or a related software engineering discipline, with at least 2+ years leading large-scale security initiatives or cross-functional projects.
• Technical Mastery: You bring expertise in core security principles, vulnerability management, automation, and defensive security strategies. You're comfortable navigating modern cloud-native environments and security architectures.
• Leadership and Initiative: You've led significant security projects at scale, proactively removed roadblocks, and influenced technical strategy at the department or organizational level.
• Collaborative Mindset: You excel at communicating with both technical and non-technical stakeholders, building consensus across teams, and presenting security trade-offs in a clear, actionable way.
• Mentorship and Influence: You have a track record of mentoring engineers, contributing to a culture of learning and trust, and elevating the technical excellence of your teams.
• Continuous Learning: You are passionate about staying ahead of security trends, evolving industry practices, and developing new areas of technical expertise.
• Compliance Awareness: Experience supporting compliance with frameworks like SOC 2, ISO 27001, or PCI DSS is a plus.

Technical Expertise

You have demonstrable experience with many of the following technologies or highly similar alternatives:

• Cloud Security: Deep experience with cloud-native platforms (at least AWS or GCP), including IAM, networking, encryption, and monitoring.
• Infrastructure as Code Security: Familiarity with securing Terraform, CloudFormation, or similar IaC workflows.
• Container Security: Proficiency with securing Docker and Kubernetes environments.
• Application Security: Strong knowledge of secure coding practices, SAST/DAST tools, dependency management, and threat modeling.
• Identity & Access Management: Hands-on experience with SSO, MFA, secrets management, and federated identity providers.
• Detection & Response: Experience with SIEM, EDR/XDR, logging pipelines, and threat detection frameworks.
• Vulnerability Management: Expertise in identifying, prioritizing, and remediating vulnerabilities across infrastructure, applications, and third-party dependencies.
• Automation & Scripting: Fluency in a programming/scripting language (e.g., Python or similar) to automate security workflows.
• Observability & Incident Response: Hands-on experience with monitoring/alerting tools and structured incident response processes.
• Data Security: Exposure to DLP, encryption, tokenization, or voice/data privacy protections.
• AI Security: Ability to integrate AI/ML observability into security monitoring - detecting anomalies in model behavior or misuse of generative AI systems.
  
  
  
  • Bonus: Experience aligning AI security practices with emerging frameworks and standards (e.g., NIST AI Risk Management Framework, ISO/IEC 42001 for AI management systems, EU AI Act readiness).
  
  
  
  

This role is remote and open to candidates located in the United States and Canada only. Please note that we are unable to provide visa sponsorship for this position.

Salary, Benefits & Perks:

At Invoca, all new hires in the U.S. receive benefits starting on day one of employment. Our benefits offerings include:

Please note that benefits for teammates outside the U.S. may vary in accordance with their country's laws and regulations.

• Flexible Time Off - We encourage a healthy work-life balance. Our flexible paid time off policy allows you to recharge and take time away as needed.
• Paid Holidays - Invoca provides 16 U.S. paid holidays, including a winter break, giving you ample opportunity to refresh and spend time with friends and family.
• Health Benefits - Our healthcare program includes medical, dental, and vision coverage, with multiple plan options so you can choose what works best for you and your family. Fertility assistance is also included.
• Retirement - Invoca offers a 401(k) plan through Fidelity with a company match of up to 4%.
• Stock Options - All employees are invited to share in Invoca's success through stock options.
• Mental Health Program- Well-being support on a broad range of issues is available through our SpringHealth program.
• Paid Family Leave - Up to 6 weeks of 100% paid leave is provided for baby bonding, adoption, and caring for family members.
• Paid Medical Leave - Up to 12 weeks of 100% paid leave is provided for childbirth and medical needs.
• InVacation - As a thank-you to our long-term team members, we offer a bonus after 7 years of service.
• Wellness Subsidy - We provide a subsidy that can be applied toward gym memberships, fitness classes, and more.
• Position Base Range - Salary Range $152,000 - $228,000/yr plus bonus potential

Our company is committed to creating a culture that is not only grounded in continuous learning, teamwork, and customer success, but is fair, equitable, and welcoming for everyone." Gregg Johnson CEO

And to us, diversity and inclusion means even more than treating current employees well and making them feel welcome. It also means proactively hiring people who bring different insights because of their unique demographics, ways of thinking, and prior experiences.

We intend to continue hiring great people and protecting our culture so everyone can be themselves and speak their minds. That way Invoca will always be a place filled with laughter, energy, hard work, thoughtfulness and respect.

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, or veteran status. We are proud to be an equal opportunity workplace.

#LI-Remote