Software Engineer II, Security Engineering (Auth0)

We are looking for a Software Engineer II to join the Auth0 Security Engineering organization. You'll help build and maintain the security guardrails for our multi-cloud environment, implementing security and compliance standards as programmatic, code-driven policies.

What You Will Do

• Cloud Security Controls: Implement and maintain organization-wide controls (SCPs, Azure Policy) balancing protection with developer experience.
• Identity & Access Management (IAM): Build and update templates and permission boundaries that govern how services and humans interact with our cloud, applying the principle of least privilege.
• Infrastructure & Network Security: Contribute to the security standards for VPC architecture, edge networking, and cross-account connectivity.
• System Design: Help build systems and processes that validate the security posture of the platform, enforcing our security policies and surfacing actionable feedback for engineering teams.
• Growth & Collaboration: Partner with teammates across the organization, share what you learn, and continually deepen your security expertise.

What You Bring

• Cloud & Infrastructure Experience: 3+ years of experience in software engineering or information security, with hands-on exposure to cloud-native environments, Kubernetes (EKS, AKS), and cloud security concepts.
• Policy & Automation: Experience building or maintaining automated controls and infrastructure-as-code, ideally within Terraform workflows.
• Security Mindset: An eagerness to identify attack vectors and think through risk in distributed systems, with a willingness to learn formal risk assessment practices.
• Tooling & AI Curiosity: Familiarity with security or cloud tooling, and an interest in applying AI to streamline security tasks and governance.
• Communication: Strong communication skills and the ability to collaborate effectively across teams.
• Education: A Bachelor's degree in Computer Science, Information Security, Systems Engineering, or a related field, or equivalent practical experience.

Nice to Have

• Exposure to compliance frameworks such as SOC2, or HIPAA in a cloud environment.
• Proficiency in one or more languages used for automation and tooling,