Security Engineer

Job description

Job responsibilities

• Own the Stack: Secure everything from our Kubernetes clusters on the cloud to our SaaS integrations and developer workflows.
• Usher in the Future: articulate and execute on a vision for what security should be in the age of LLMs giving both us and attackers increasing leverage.
• Engineer for Security: Build internal tooling and CI/CD automations that catch vulnerabilities before they ever hit production.
• Architect & Model: Lead threat modeling sessions and secure code reviews, ensuring we design "secure-by-default" APIs and deployments.
• Harden the Perimeter: Take a first-principles approach to hardening authentication and access control across all internal and external surfaces.
• Red Team: proactively probe for vulnerabilities and lead the remediation.
• Lead the Bug Bounty: You will be the primary owner for standing up, launching, and managing our Bug Bounty Program , triaging reports, and driving remediation.
• Respond & Remediate: Investigate vulnerabilities, lead incident response, orchestrate pen testing, and run blameless postmortems that actually result in systemic change.

Job requirements

• Startup Native: You thrive in a fast paced 100–300 person environments. You know how to prioritize when everything feels urgent and are comfortable "failing forward" to find the right solution.
• Security-First Engineer: You have 6+ years of experience in software/infrastructure engineering with a deep obsession with security. You don't just find holes; you write the code to plug them.
• Cloud Savvy: You are deeply familiar with Google Cloud (GCP) , Kubernetes , and containerized environments.
• Systems Thinker: You can analyze a system for weaknesses whether they are buried in business logic, IAM configurations, or the codebase.
• Action-Oriented: You have a track record of responding to real-world incidents and leading remediation efforts without being the "no" person.