Security Engineer Jobs

About The Position

Requirements

• At least 10 years conducting security reviews, threat modeling, tracking findings, and communicating risk to engineering and leadership.
• Knowledge of distributed systems design patterns and their security implications when developing cloud-scale platform services.
• Deep understanding of cloud-native architecture and managed platform services, such as compute, storage, networking, and databases.
• Experience designing multi-tenant systems and securing multi-tenant software-as-a-service and platform-as-a-service offerings.
• Conversant in at least one programming language, such as Python, Java, Go, or Swift.
• Experience with security standard processes in third-party cloud environments.
• Ability to investigate complex technical systems and identify weaknesses and opportunities for security improvement.
• Experience establishing relationships with engineering teams to drive security improvements.
• Ability to guide secure designs and risk decisions, and communicate security risks.
• Bachelor's degree or equivalent experience preferred.

Nice To Haves

• Community contributions such as public CVEs, bug bounty recognition, open-source tools, or blogs.
• Experience securing container orchestration systems such as Kubernetes and understanding their security implications in multi-tenant environments.
• Experience with artificial intelligence and machine learning.

Responsibilities

• Serve as the primary security team point of contact for several large engineering efforts.
• Partner with engineering teams throughout the development lifecycle.
• Lead early security implementation through threat modeling and security guidance.
• Conduct security reviews, develop threat models, track findings, and communicate risk to engineering teams and leadership.
• Use engagement insights to build scalable security methodologies.
• Define, automate, and advocate for platform-wide security improvements.
• Collaborate with security engineering, privacy, offensive security, developers, and site reliability engineers to protect services and improve security.
• Identify areas for security improvement and establish appropriate security goals.
• Guide partners toward workable secure designs and informed risk decisions.
• Develop proof-of-concept systems to automate security recommendations, vulnerability discovery, and process workflows.
• Use data to improve security review efficiency and prioritize high-value engagements.
• Make security decisions affecting millions of users.