Security Software Engineer, Security & Trust

About this role

Whats the opportunity: As a Security Software Engineer on our Security & Trust team, you'll build the systems that help mature Aura's security and compliance commitments. You'll partner with our Security Assurance Manager , who owns our compliance frameworks and audit program, and be responsible for turning those requirements into automated, enforceable technical controls: policy-as-code in our pipelines, continuous monitoring across our cloud environments, and scalable workflows that grow with the business.

This is an engineering role first. You don't need a compliance or security background; we'll teach you the frameworks. What we need is someone who writes solid code, thinks in systems, and wants to apply those skills to one of the most interesting problems in security right now. Day to Day: Build & Automate: Translate security and compliance requirements, defined with our Security Assurance Manager , into automated technical controls, using policy-as-code enforced in CI/CD and against infrastructure-as-code.

Build pipelines and integrations that collect compliance evidence directly from our internal systems, so audits run on live data rather than screenshots and spreadsheets. Develop continuous monitoring for security controls and cloud environments, integrating with our GRC tooling (e.g., Vanta) and surfacing issues where engineers already work. Apply AI and automation to streamline compliance workflows — from intelligent triage of risk assessments to automated evidence gathering and control validation.

Scale the Program: Help engineer our Common Control Framework, building a unified structure that serves audits, risk assessments, and vendor reviews from a single source of truth. Build the tooling and workflows that let the Security & Trust team operate efficiently as the company grows — automating repetitive processes, improving reporting, and reducing the compliance burden on engineering teams. Support audit readiness across multiple frameworks (SOC 2, SOX, ISO 27001) by ensuring evidence is continuously collected, organized, and accessible.

Collaborate: Work hand in hand with our Security Assurance Manager , who owns frameworks, policy, and audits, providing the technical implementation and evidence behind our compliance program. Partner across business and technical teams to embed security and compliance into existing workflows — our team philosophy is partnership, not mandates. Contribute to cross-functional initiatives including vendor risk management, access reviews, and security advisory across the organization.