Security Engineer

SECURITY ENGINEER MISSION LENS’s mission is to end traffic accidents. LENS prevents accidents and saves lives by detecting hazards to prevent accidents before they happen. PLATFORM & PRODUCT LENS Detect scans CCTV feeds on highways to identify hazards, in real-time, before they become accidents. Public Safety agencies, alongside Departments of Transportation, receive alerts on the LENS Detect dashboard about Disabled Vehicles, Stalled Big Rigs, and Pedestrians on Freeway. A dispatcher reviews and validates the detection, and then dispatches an officer to the scene to assist the person in need — resulting in either preventing an accident or saving a life. CBS LA recently did a three minute TV feature that succinctly captures what LENS is doing with Public Safety Agencies in one of the largest traffic capitals in the world: CHP LA Communications Center using AI to prevent accidents before they happen http://youtube.com/watch?v=KrY2NVJ2eno ROLE & RESPONSIBILITIES As a Security Engineer at LENS, you seek transformational change. You do not accept the status quo that accidents are an accepted inevitability, or that they just happen. Instead, you believe when the root cause of an accident can be known in advance, the accident can and should be prevented. You work with fellow Preventers that share this core belief, using LENS to prevent accidents and save lives. Your responsibilities are: - Working closely with our Co-Founder and CTO to design, implement, and operate the security architecture that protects LENS products, its data, and the public safety agencies that depend on it. - Owning the security posture of LENS end-to-end - from cloud infrastructure and network security to application-layer controls, identity and access management, and data protection across the full stack. - Leading LENS's compliance and authorization programs, including FedRAMP and GovRAMP, ensuring LENS meets the security requirements of government agency customers and is positioned to expand into new agency relationships. - Embedding security into the engineering culture - conducting threat modeling, security reviews, and penetration testing, and working directly with engineers to ensure security is designed in, not bolted on. - Detecting, responding to, and learning from security events - building the monitoring, alerting, and incident response capabilities that ensure LENS can identify and contain threats before they impact agencies or operations. MINDSET, PRINCIPLES, AND SKILLS & EXPERIENCE Your mindset is grounded in: - Security is a Preventer's work. The agencies using LENS depend on a platform that is always available, always trustworthy, and always protecting the data they share with us. Securing that platform is not a constraint on the mission - it is part of how the mission gets done. - Simultaneously setting foundation, while keeping an open mind. You build security infrastructure that protects LENS today and scales with it - while staying curious about new threat vectors, new tooling, and new approaches that keep our posture ahead of what's coming. - Everyone is on the security team. You build a culture where security isn't something that happens in the background - it's something every person at LENS understands, practices, and takes ownership of. You invest in training, clear policies, and the kind of communication that makes secure behavior the path of least resistance. Principles you share with us are: - We remove single points of failure and create safety nets. You design security controls with redundancy - so that if one layer is tested, the next is already in place. No single misconfiguration, credential, or exposure becomes a mission-ending event. - Begin with the end in mind. You identify the security posture LENS needs to achieve - FedRAMP authorization, zero-trust architecture, agency trust - and work backwards to the sequence of controls, documentation, and validations required to get there. - Invest the most time where it makes the most progress. You evaluate every security investment by the risk it reduces and the mission impact it protects, prioritizing controls that eliminate the highest-consequence exposures first. The Skills & Experience you have are: - Building and operating security architecture for cloud-native and AI platforms, including experience with GCP, AWS, or Azure security services, IAM and Organizational Policy Design, API Gateway Scoping, network segmentation, and KMS/encryption at rest and in transit. - Leading or significantly contributing to FedRAMP, SOC 2, or equivalent government compliance programs - including documentation, control implementation, continuous monitoring, and working with third-party assessors. - Hands-on experience with application security, including threat modeling, secure code review, vulnerability management, and penetration testing. Experience with OWASP ZAP, OX suites is ideal. - Building security monitoring, detection, and incident response capabilities using SIEM tooling, log aggregation, and alerting frameworks in production environments. Experience with Splunk or GSO is ideal. - Being a collaborative security partner to engineering teams - translating security requirements into actionable guidance without creating friction that slows the mission down. - Delivering security outcomes that meet the demands of government agency customers in Public Safety and Transportation, where trust is non-negotiable and reliability is a baseline expectation. The time to accept traffic accidents is ending, and the time to prevent them has begun. This belief is becoming more of an inevitable reality every day. The public agencies LENS serves are depending on a platform they can trust completely. If you want to secure the infrastructure behind a team preventing accidents and saving lives, this role is for you. LENS is an equal opportunity employer committed to building an inclusive workplace. We do not discriminate against any applicant or employee on the basis of race, color, religion, sex (including pregnancy, childbirth, and related medical conditions), sexual orientation, gender identity, age, national origin, protected veteran status, disability, marital status, genetic information, or any other characteristic protected by applicable federal, state, or local law.