Security Engineer

Patreon

42d•$170,000 - $255,500•Hybrid

About The Position

Patreon is seeking a Security Engineer to join their mission of funding the creative class. This role involves protecting Patreon creators and their fans by working on application security, infrastructure security, and internal/corporate security. The position requires a blend of proactive and reactive security work, including contributing to security projects, responding to investigations, and participating in an on-call rotation for security incidents. The engineer will write code to support security initiatives and enhance platform security, collaborating with various teams across the organization. The ultimate goal is to reduce risks and safeguard the security, privacy, and trust of Patreon's users.

Requirements

Two or more years of experience reducing security risks in application, infrastructure, or corporate security spaces.
Ability to create a threat model and explain why a given risk matters and what might be done to reduce it.
Deeper knowledge (three or more years) in at least one security or security-adjacent domain (infrastructure security, application security, cloud security, corporate/IT security, cryptography, privacy, etc.).
Ability to develop software (Python, Rust, Golang, or a similar language).
Experience working in a modern software development environment (git, CI/CD, LLM coding tools, etc.).
Experience using AI tools (LLMs, ML models, etc.) to identify and address security issues (software vulnerabilities, detection and response, etc.).
Energized by fast iteration: shipping MVPs, testing hypotheses, and evolving products based on creator and fan response.
Pride in creating elegant solutions to messy, real-world problems and balancing pragmatic trade-offs between security risks and business needs.
Belief in Patreon’s mission: giving creators control over their work and building communities that feel good to be in.
Bachelor’s or Master’s degree in Computer Science, Computer Engineering, or a related field, or the equivalent.

Nice To Haves

Experience working on large scale Internet platforms that allow users to upload content.
Past contributions to large scale, production code bases.
Experience responding to security incidents, investigating incident impact, and building out incident mitigations.

Responsibilities

Contribute to security projects.
Respond to security investigations, vulnerabilities, or questions.
Work across application security, infrastructure security, and internal/corporate security.
Engage in both proactive and reactive security work.
Participate in an on-call rotation to respond to security incidents and investigations.
Write code to support security work and improve the security of the Patreon platform.
Collaborate with other members of the security team, the wider Risk engineering org, and cross-functional partners in engineering, legal, and IT.
Reduce known risks and protect the security, privacy, and trust of Patreon creators and their fans.