Senior/Staff Security Engineer

This is a fully remote position, open to applicants in North America.

📋 Description

• Manage, automate, and enhance the end-to-end vulnerability management process.

• Assess, prioritize, and facilitate remediation efforts across products, infrastructure, and dependencies.

• Oversee the bug bounty initiative, which includes report assessment, severity validation, remediation coordination, and maintaining relationships with researchers.

• Direct product security assessments, encompassing threat modeling, design and code evaluations, as well as both manual and tool-assisted testing.

• Address security incidents by leading investigations and containment efforts, driving postmortems, and implementing hardening tasks.

• Responsible for specific aspects of cloud and infrastructure security within GCP, Kubernetes, and Postgres.

• Strengthen configurations and collaborate with infrastructure engineering to establish secure defaults.

• Develop and uphold security tools and automation, including AI/LLM-assisted workflows.

• Collaborate with GRC/Trust on risk registers, control evidence, and compliance needs.

⛳️ Requirements

• Minimum of 5 years of experience in security engineering.

• Extensive expertise in at least two of the following areas: vulnerability management, product/application security testing, incident response, and cloud security.

• Proficient in reading and interpreting code, particularly in TypeScript.

• Comfortable operating in cloud environments; experience with GCP is advantageous.

• Familiarity with AI coding/security tools such as Linear Agent, Claude, and Codex.

• Capability to lead security incidents from initial alert through to postmortem analysis.

• Proficient in creating scripts and security tools to automate manual tasks.

• Ability to prioritize practical risk mitigation efforts.

• Skilled in independently setting priorities and knowing when to escalate issues.

• Competent in articulating technical findings to non-technical stakeholders and documenting actionable insights.

• Practical experience with Cloudflare, Google Cloud, Kubernetes, Postgres, and Node.

• Familiarity with tools such as Linear, GitHub, Slack, Google Workspace, Claude, ChatGPT, Vanta, GitHub Advanced Security, RunReveal, and SentinelOne.

🏝️ Benefits

• Competitive salary and equity package.

• Employee-friendly equity terms, including early exercise options in the US and extended exercise windows.

• Daily meal and coffee allowance on workdays.

• Provision for paid co-working space or desk.

• Health insurance coverage based on country regulations.

• 5 weeks of paid vacation, in addition to local statutory holidays.

• 4 months of paid parental leave.

• Additional paid month off after 4 years of service, and every 2 years thereafter.

• Regular team-building events and off-site activities.

• Remote-first work culture with no mandatory commuting.