Staff Security Engineer – PSIRT

This is a fully remote position, open to applicants in United States.

📋 Description

• Establish and manage Flock's Security Incident Response Team (PSIRT) as the primary point of accountability for all externally-reported and internally-identified vulnerabilities affecting Flock products.

• Collaborate with various teams regarding solutions while also engaging with your security colleagues for security validation.

• Serve as the operational leader of our newly formed CNA and the technical director of our Coordinated Vulnerability Disclosure (CVD) program.

• Ensure that fixes are implemented across Hardware, Firmware, Device SRE, Cloud SRE, Mobile, ML, Legal, Communications, and Customer Support.

• Influence and lead across engineering, legal, communications, and support by establishing SLAs, metrics, playbooks, and public security advisories for the entire company to follow.

• Work closely with our Detection & Response team and Corporate Security to minimize risks for devices in the field and the customers who rely on them.

⛳️ Requirements

• Over 7 years of experience in security engineering, with a minimum of 4 years managing or leading a PSIRT, product security, or coordinated vulnerability disclosure function.

• Proven track record of end-to-end ownership of the FIRST PSIRT Services Framework v1.1 service areas (Stakeholder Ecosystem, Discovery, Triage, Remediation, Disclosure).

• Practical operational experience serving as a CVE Numbering Authority (CNA) or overseeing the technical onboarding of one.

• Extensive knowledge of CNA Operational Rules v4.x, CVE scope definition, and root coordination (CISA ICS-CERT, MITRE).

• Strong familiarity with ISO/IEC 29147 (disclosure), ISO/IEC 30111 (handling), the CERT/CC Guide to CVD, and CISA Binding Operational Directive 20-01.

• Solid technical understanding of product security, with significant operational experience in at least three of the following areas (with areas 1 and 2 being highly prioritized):

• - Embedded/Firmware Security (Secure boot, hardware root of trust, UART/JTAG/USB attack surfaces, OTA integrity).

• - Linux/Android Device Security.

• - Cloud Security on AWS (IAM, EKS, federation, secrets management).

• - Mobile/Web App Security (OWASP Top 10, GraphQL, authn/authz).

• - ML/CV Model Security (Adversarial inputs, data poisoning, extraction).

• Proficient with CVSS v3.1/v4.0, CWE classification, EPSS, and SSVC frameworks.

• Outstanding written communication skills.

• Capability to obtain and maintain CJIS certification as a condition of employment.

🏝️ Benefits

• Flexible PTO: We provide non-accrual PTO in addition to 11 company holidays.

• Comprehensive health benefits plan for employees: covering Medical, Dental, and Vision, along with an HSA match.

• Family Leave: All employees are entitled to 12 weeks of fully paid parental leave, with birthing parents eligible for an additional 6-8 weeks of physical recovery time.

• Fertility & Family Benefits: We have partnered with Maven, a complete digital health benefit for starting and raising a family. Flock will offer a $50,000 lifetime maximum benefit related to eligible adoption, surrogacy, or fertility expenses.

• Spring Health: Spring Health provides a range of mental health benefits, including therapy, coaching, medication management, and digital tools tailored to individual needs.

• Caregiver Support: We collaborate with Cariloop to offer caregiver support to our employees.

• Carta Tax Advisor: Employees receive one-on-one sessions with Equity Tax Advisors to address individual grants, model tax scenarios, and answer general inquiries.

• ERGs: We strive to ensure that all employees thrive and feel a sense of belonging at Flock. Currently, we offer four ERGs - Women of Flock, Flock Proud, LEOs, and Melanin Motion.

• WFH Stipend: $150 per month to help offset the costs of working from home.

• Productivity Stipend: $300 per year to use on platforms like Audible, Calm, Masterclass, Duolingo, and more.

• Home Office Stipend: A one-time $750 to assist you in creating your ideal office space.