22Miles builds digital signage and workplace experience software deployed across enterprise campuses, healthcare systems, universities, and corporate offices. Our platform runs in our customers' networks and on unattended devices in their lobbies, hallways, and meeting rooms. That footprint makes security a first-class product requirement, not a checkbox. We are hiring a dedicated Security Engineer. This is a hands-on execution role. Security direction and architectural decisions are set by the tech lead, who knows the codebase in depth. Your job is to take that direction and turn it into finished work: tooling that runs automatically, findings that actually get fixed, and documentation our enterprise customers can rely on. This is a good fit if you want to build a security function from the ground up and are more interested in closing issues than writing strategy decks. It is not a fit if you are looking to set independent security strategy on day one. What you'll do Remediation and follow-through Work from a prioritized list of known issues and drive each one to a verified fix Track findings across releases, chase down owners, and confirm closure — this is the core of the job Verify fixes rather than accepting "done" at face value Security tooling and automation Stand up and maintain open-source scanning in our CI pipeline: dependency scanning (Trivy, OWASP Dependency-Check), secret scanning (gitleaks, trufflehog), and static analysis (Semgrep) Tune rules to cut false positives so developers keep trusting the output Write custom rules for patterns specific to our codebase Code and design review Read our code and flag anything that looks wrong Sit in on design reviews for new features to learn how authorization and tenancy decisions get made — and, over time, take on more of that judgment yourself Customer-facing security work Complete enterprise security questionnaires and assessments Maintain our security documentation, policies, and evidence Coordinate third-party penetration tests and track remediation of findings Internal IT security Windows domain policy, endpoint permissions, and identity management (Entra ID / Intune) Access reviews and least-privilege cleanup across internal systems What we're looking for Required 2+ years in security engineering, or a developer/IT background with demonstrated security work Able to read application code and explain why something is a problem — not just run a scanner and forward the report Working understanding of authentication, authorization, secrets management, and least privilege Comfortable with CI/CD pipelines and integrating tooling into them Clear written communication — you will be writing to customers and to developers Persistence. Most security issues aren't unknown, they're unclosed. We need someone who keeps a list and keeps pushing until it's empty. Nice to have Multi-tenant SaaS security experience Windows domain administration SOC 2 preparation or audit experience Experience with unattended, physically accessible devices (kiosks, IoT, edge) Penetration testing exposure Not required Security certifications Prior experience in digital signage or AV How to apply Send a resume and a short note describing a security issue you found and drove to a fix — what it was, how you found it, and what it took to get it closed.

Job Type:

Full-time Pay:

$85,000.00 - $120,000.00 per year

Benefits:

401(k) 401(k) matching Dental insurance Flexible spending account Health insurance Health savings account Life insurance Paid time off Vision insurance Application Question(s): Do you have 2+ years in security engineering, or a developer/IT background with demonstrated security work Can you code in php, js, c++ and C# Are you a U.S.

Citizen Location:

Peachtree Corners, GA 30092 (Required)

Work Location:

In person