Lead Security Engineer (Cryptography and Threat Modeling)

About the role

We are looking for a Lead Security Engineer to own the creation of a cryptographic inventory across our product portfolio, ensuring FIPS 140‑3 compliance and driving secure design through threat modeling.

Key responsibilities

• Drive the creation of a crypto inventory across Signavio products, using IBM QSE and agentic validation.
• Review FIPS 140‑3 findings, define and coordinate mitigation plans with engineering teams, and track progress.
• Facilitate threat modeling workshops for cloud applications and produce clear, actionable reports.
• Contribute to broader Secure Development and Operations Lifecycle (SDOL) activities as needed.

Required profile

• 5+ years of hands‑on software security experience, delivering end‑to‑end security initiatives.
• Proven ability to work independently, take ownership and drive topics to completion.
• Strong documentation, communication and stakeholder‑management skills.
• English proficiency at B2 level or higher.

Required skills

• Cryptography and familiarity with FIPS 140‑3 compliance.
• IBM QSE.
• Agentic AI.
• Jira for task and project tracking.
• Threat modeling for cloud applications.

What we offer

• Hybrid work model – remote from anywhere in Latvia or from our Riga office.
• Opportunity to work on cutting‑edge security projects for global clients.
• Access to an advanced tech stack in cloud, data and AI.
• Professional development resources and a strong AI‑focused community.