Senior Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Construct and manage the Security Observability & Data Platform, handling tens of TB per month and increasing.

• Create ingestion, normalization, retention, querying, and detection layers.

• Develop, test, review, and evaluate detections for accuracy.

• Oversee endpoint security throughout the fleet, including EDR, binary authorization, and hardening standards.

• Direct threat hunting, internal investigations, insider-threat initiatives, and comprehensive security incident responses.

• Execute triage, containment, forensics, root-cause analysis, and implement preventive controls.

• Design and manage security services such as zero-trust AuthN/AuthZ, blocking services, application proxies, asset inventories, developer portals, and compliance as code.

• Create and manage local and Kubernetes agent platforms.

• Employ LLM agents to automate triage, enrichment, investigation, and response with deterministic checks when necessary.

• Assess the security of Kubernetes, AWS/GCP, bare-metal, and CI-runner infrastructure and cloud designs.

• Assist engineering teams in adopting shared security services.

• Conduct red-team and adversary-emulation exercises and translate findings into detections and solutions.

• Draft actionable runbooks and post-mortems.

⛳️ Requirements

• Bachelor’s degree in Computer Science, Computer Engineering, a relevant technical discipline, or equivalent practical experience.

• Over 5 years of experience in security engineering, detection and response, or infrastructure/SRE with a security emphasis.

• Practical incident response experience on endpoints and in cloud environments.

• Proficient in operating an EDR and crafting and fine-tuning detections.

• Familiarity with macOS and Linux internals, encompassing persistence, credential theft, process injection, and living-off-the-land binaries.

• Experience in building or managing telemetry pipelines and a SIEM or security data lake at TB scale.

• Strong SQL skills, including detection logic applied to large datasets.

• Hands-on production engineering experience with Linux, containers, Kubernetes, at least one major public cloud, infrastructure as code, monitoring, and alerting.

• Proficiency in Python or Go.

• Comfort with Rust or a willingness to learn and work with Rust.

• Basic knowledge of SSO (OIDC/SAML), phishing-resistant MFA, device trust, session theft, and token theft.

• Excellent written communication skills.

• A keen interest in the web3 domain is essential.

• Employment is contingent upon successful completion of a background check.

🏝️ Benefits

• Tokens and equity compensation.

• Eligibility to engage in annual equity and token refresh grant programs.

• Comprehensive medical, dental, and vision insurance for employees and their dependents.

• Health Savings Accounts (HSAs) and Flexible Spending Accounts (FSAs).

• 18 weeks of paid parental leave.

• Wellbeing programs, including family planning support, gender-affirming care, hormone replacement therapy, and fitness/nutrition apps.

• Mental health support and counseling services.

• Employee Assistance Program (EAP) providing financial/legal assistance and home-life referrals.

• Coverage for short-term and long-term disability.

• Life insurance and accident insurance.

• Traveler insurance.

• 401(k) plan.

• Complimentary privacy protection services.

• Wellness stipend.

• Flexible paid time off.

• 11 paid holidays annually.

• Team offsites and an annual all-company retreat.

• Remote-first work environment.