Clera home
·Dashboard

Jobs at Indico Data (Now Hiring) — 1 open

Indico Data logoIndico Data

Senior Cybersecurity Engineer

Boston, Massachusetts, United States · Remote OK

$165k–$185k/yr

Senior$49M raised

Senior Cybersecurity Engineer Location: USA, East Coast Preferred Experience Required: 6–10 years About the Position The Senior Cybersecurity Engineer is a hands-on technical security role responsible for improving Indic…

Skills: Aws Security, Kubernetes Security, Ci/Cd Security, Incident Response, Identity And Access Management

Indico Data logo

Senior Cybersecurity Engineer

Indico Data

Boston, Massachusetts, United States • Remote OK

Apply
Senior

Tired of cold applications?

Sign up with Clera and we'll reach out the moment a role actually fits you — no more spraying applications into the void.

  • $165k–$185k/yr
  • Full-time
  • Posted 4d ago
  • Apply by Oct 21
  • ~40 hrs/week

Responsibilities

The Senior Cybersecurity Engineer is responsible for improving the technical security posture across AWS, Kubernetes, and CI/CD pipelines. The role involves partnering with the CISO and CTO to implement technical controls, conduct security reviews, and manage incident response operations.

Requirements

Requires 6+ years of relevant security experience, specifically with AWS, Kubernetes, and cloud-native environments. Candidates must be proficient in scripting languages like Python or Go and have a strong background in identity management and vulnerability remediation.

Full job description

Senior Cybersecurity Engineer

Location: USA, East Coast Preferred
Experience Required: 6–10 years

About the Position

The Senior Cybersecurity Engineer is a hands-on technical security role responsible for improving Indico’s security posture across AWS, Kubernetes, CI/CD, product security, internal systems, and incident response.

This role works in partnership with Indico’s CISO and CTO. The CISO owns security strategy, formal risk acceptance, policy approval, and executive accountability. The Senior Security Engineer turns that direction into practical technical controls, security reviews, operating processes, and cross-functional execution.

This role acts as a security check and balance for Engineering and Platform. You will review technical work against defined security expectations, request changes where needed, and help teams build secure systems without creating unnecessary friction.

Security does not own every security task. Engineering and Platform own implementation and remediation for the systems they build and run, including CVEs, infrastructure changes, CI/CD permissions, committed-secret remediation, and production access implementation. IT/Ops, People Ops, and system owners own day-to-day access administration. The Senior Security Engineer owns technical security standards, reviews, escalation paths, control design, and program execution.

This is a remote role, with East Coast hours preferred.

About You

You are a pragmatic technical security generalist with strong cloud security instincts. You are comfortable working across AWS, Kubernetes, IAM, networking, secrets management, CI/CD, monitoring, product security, and incident response.

You are technical enough to earn credibility with Engineering and Platform, independent enough to act as a real check and balance, and practical enough to focus on controls that reduce meaningful risk.

You know how to make security work in a startup: focus on the risks that matter, keep the process lightweight, and build guardrails that help teams move quickly without creating unnecessary exposure.

Responsibilities

  • Improve Indico’s technical security posture across AWS, Kubernetes, CI/CD, product security, internal systems, and incident response
  • Partner with the CISO and CTO to turn security priorities into practical technical controls, standards, reviews, and operating processes
  • Review Engineering work against security standards, with authority to request changes where needed
  • Partner with Engineering on AWS security controls, including IAM, networking, account structure, logging, encryption, key management, backups, production access, and customer-dedicated environments
  • Review and improve Kubernetes and container security controls, including workload identity, RBAC, network boundaries, image security, runtime monitoring, and deployment patterns
  • Define and improve secure CI/CD patterns, including GitHub permissions, branch protections, privileged workflows, secrets handling, release controls, and deployment access
  • Define and oversee processes for vulnerability management, committed-secret response, secure development, incident response, and access control while Engineering, Platform, IT/Ops, and system owners operate them in their domains
  • Provide product security support, including secure design review, threat modeling for sensitive features, scanner tuning, and high-risk change review
  • Improve detection and response coverage across tools such as CloudTrail, GuardDuty, CrowdStrike, SIEM/logging platforms, vulnerability scanners, and secrets detection
  • Own day-to-day security monitoring and response operations, including alert routing, triage expectations, escalation paths, and detection improvements
  • Coordinate technical containment during security incidents across Engineering, Platform, IT/Ops, and leadership
  • Maintain incident response runbooks and partner with the CISO on severity, executive escalation, counsel/compliance coordination, and customer communication strategy
  • Create practical security guidance, standards, procedures, and runbooks for security-sensitive work such as production access, secrets handling, vulnerability remediation, incident response, customer data handling, and secure engineering
  • Maintain reusable technical security documentation, standard responses, and evidence packages for customer due diligence and compliance support
  • Evaluate security tools and vendors with a focus on technical coverage, operational fit, and reducing manual work
  • Build or sponsor lightweight automation, checks, dashboards, and workflows that make security controls repeatable

Requirements

  • 6+ years of relevant security experience, ideally in a startup, SaaS, cloud-native, or enterprise software environment
  • Strong hands-on experience with AWS security, including IAM, networking, logging, monitoring, encryption, access controls, and production security
  • Experience securing Kubernetes, containers, CI/CD pipelines, infrastructure-as-code, and modern cloud deployment patterns
  • Strong understanding of identity and access management, least privilege, privileged access, workload identity, and service-to-service permissions
  • Working knowledge of application and product security, including authentication, authorization, secure coding, common web risks, and secure design review
  • Experience defining or operating vulnerability management, secrets management, secure development, access control, or incident response processes
  • Experience with secrets management, cloud key management, encryption design, data residency, threat modeling, or secure SDLC programs
  • Experience with security monitoring, alert triage, incident response coordination, and remediation tracking
  • Experience with Python, Go, Bash, or other scripting languages for security automation
  • Ability to review infrastructure, application, and operational changes for material security risk
  • Ability to partner with Engineering and Platform while maintaining appropriate independence and oversight
  • Strong written and verbal communication skills, including clear technical guidance, standards, runbooks, and customer-facing security documentation
  • Good judgment around risk prioritization, compensating controls, exceptions, and startup-appropriate tradeoffs
  • Ability to operate independently, create structure, and drive work to completion

Bonus

  • Experience as a first or early security hire at a startup
  • Experience securing single-tenant SaaS or customer-dedicated cloud environments
  • Experience with AWS EKS, Terraform, Helm, ArgoCD, GitHub Actions, or similar infrastructure tooling
  • Experience with CrowdStrike
  • Experience supporting SOC 2, ISO 27001, HIPAA, GDPR, customer audits, or enterprise security questionnaires
  • Pragmatic, risk-based, comfortable with ambiguity, and focused on security practices people actually use

Related keywords

AwsKubernetesCi/CdIamCloudTrailGuardDutyCrowdStrikeSiemPythonGoBashTerraformHelmArgoCDGithub ActionsSoc 2

About Indico Data

LinkedInVisit site

Keep insurance work in motion

Industry
Software Development
Company size
51-200 employees
Founded
2013
Headquarters
Boston, Massachusetts
LinkedIn followers
6,576
Total funding
$49M

Indico is the Intake & Orchestration Platform for insurance — the operations layer that modernizes how work enters and moves through the enterprise. The platform ingests, enriches, and orchestrates work across underwriting, claims, and servicing, automatically transforming submissions, spreadsheets, emails, loss runs, statements, and claims packets into structured, validated outputs that route cleanly to the right systems and teams. By eliminating manual intake, triage, and coordination tasks, Indico delivers the accuracy, speed, and scale needed to keep complex workflows moving and reduce operational drag across the enterprise.

Offices: 55 Court St, 2nd Floor, Boston, Massachusetts 02108, US

Machine LearningArtificial IntelligenceIntelligent AutomationUnstructured DataTransfer LearningComposite AIIntelligent Document ProcessingIntake & OrchestrationUnderwriting Automtionand Claims Automation
View all jobs at Indico Data

About Indico Data

LinkedInVisit site

Keep insurance work in motion

Industry
Software Development
Company size
51-200 employees
Founded
2013
Headquarters
Boston, Massachusetts
LinkedIn followers
6,576
Total funding
$49M

Indico is the Intake & Orchestration Platform for insurance — the operations layer that modernizes how work enters and moves through the enterprise. The platform ingests, enriches, and orchestrates work across underwriting, claims, and servicing, automatically transforming submissions, spreadsheets, emails, loss runs, statements, and claims packets into structured, validated outputs that route cleanly to the right systems and teams. By eliminating manual intake, triage, and coordination tasks, Indico delivers the accuracy, speed, and scale needed to keep complex workflows moving and reduce operational drag across the enterprise.

Offices: 55 Court St, 2nd Floor, Boston, Massachusetts 02108, US

Machine LearningArtificial IntelligenceIntelligent AutomationUnstructured DataTransfer LearningComposite AIIntelligent Document ProcessingIntake & OrchestrationUnderwriting Automtionand Claims Automation
View all jobs at Indico Data

Similar companies hiring

Amazon (10879)Bosch (3640)Google (3547)Prolific (3433)AgileEngine (3021)Transport AI (1776)Booz Allen Hamilton (1543)Speechify (1529)Microsoft (1458)BJAK (1106)Salesforce (1026)Cisco (951)
Clera home

Your AI-talent agent. Connecting talents with dream jobs.

Earn $5,000

Tools

  • Salary Calculator
  • Resume Review
  • Startup Map

Explore

  • Jobs
  • Discover Jobs
  • Companies
  • Referral

Platform

  • Pricing
  • Integrations
  • Partners
  • Acquihire

Clera

  • Manifesto
  • Engineering
  • We are hiring!
  • FAQs
  • Blog
  • Press

Tools

  • Salary Calculator
  • Resume Review
  • Startup Map

Explore

  • Jobs
  • Discover Jobs
  • Companies
  • Referral

Platform

  • Pricing
  • Integrations
  • Partners
  • Acquihire

Clera

  • Manifesto
  • Engineering
  • We are hiring!
  • FAQs
  • Blog
  • Press

© 2026 Clera Labs, Inc.

PrivacyTermsBug Bounty