Senior Security Engineer

GoFundMe

6d•$124,500 - $186,500•Remote

About The Position

GoFundMe is seeking a Senior Security Engineer to join their team and help build a secure platform for giving. This role is for a generalist within the security specialty and requires collaboration with engineering teams to enhance security through consultation, education, tooling, and process improvements. The position is remote but requires overlap with Pacific Time. The engineer will perform code reviews and security assessments, evaluate emerging AI technologies for secure adoption, develop scalable solutions for recurring security challenges, handle third-party vulnerability reports, and lead incident response and post-mortem investigations. Participation in an on-call rotation is also expected.

Requirements

3+ years contributing to secure outcomes with engineering teams.
Experience with OWASP Top 10 and other industry standards.
Experience with application security and security testing.
Experience in secure code review, including basic skills in one or more of PHP, Python, Kotlin, JavaScript, and TypeScript.
Excellent written and verbal communication skills.

Nice To Haves

Demonstrate growing judgement skills.
Dedicated to delivering work in security while setting high expectations for our users and coworkers.
Demonstrate an inclusive mindset and enjoy working with people from a wide range of backgrounds and experiences.

Responsibilities

Partner with engineering teams to improve security through consultation, education, tooling, and process improvements.
Perform targeted code reviews and security assessments when investigating high-risk designs, vulnerabilities, or security-sensitive features throughout the Secure Development Lifecycle.
Help evaluate emerging AI technologies and development practices, helping engineering teams adopt them securely through practical guidance, guardrails, and risk assessments.
Notice recurring security challenges and contribute to scalable solutions that reduce risk across the organization.
Help handle application vulnerability reports received through third-party sources. Review, prioritize, and work with the relevant engineering teams to remediate them.
Command incidents and facilitate post-mortem investigations.
Participate in on-call rotation and take your turn shouldering operational toil for the team.