About the Role: We're hiring a
Staff Security Engineer, a senior, polyglot, full-stack Application Security Engineer who not only uncovers vulnerabilities but also goes into application and infrastructure codebases to fix them. You will partner with product and engineering teams to champion secure design, automate developer workflows, and scale AppSec as an engineering-first discipline.
Responsibilities:- Perform hands-on security work across the stack: code reviews, threat modeling, vulnerability hunting, and remediation in production services.
- Own end-to-end remediation for complex findings: from exploit proof-of-concept to code-level fixes and automated CI checks.
- Build and maintain developer-first security tools, automation, and self-service capabilities (SAST rules, IaC scanning, dependency/OSS policies, CI/CD gates).
- Lead threat modeling sessions and secure design reviews for new product initiatives and platform changes.
- Collaborate with SRE and Platform teams to harden runtimes, secrets management, identity, and authentication flows.
- Mentor and coach engineers on secure coding, secure-by-default patterns, and incident learnings.
- Contribute to security metrics and visibility (vulnerability backlog, mean time to remediate, coverage of automated tests).
About You: - 10+ years software engineering and application security experience (or equivalent), with deep hands-on polyglot coding experience across at least two major languages (e.g., Java, Python, Go, JavaScript/TypeScript, C#).
- Demonstrated ability to both find security issues (offensive skills) and implement fixes across app and infra codebases (defensive skills).
- Experience building developer-friendly AppSec programs and integrating security tooling into CI/CD pipelines.
- Familiarity with cloud platforms (AWS, GCP, Azure) and container/Kubernetes security practices.
- Strong communication skills and experience mentoring engineers across multiple teams.
- Comfort with threat modeling, secure design patterns, PKI/identity flows, OAuth/OIDC, and authentication hardening.
- Experience working at scale in B2B SaaS environments; prior experience at developer-focused security companies or engineering-forward startups is a plus.
- Bachelor's degree in computer science or a related field
Nice to have - Open-source security contributions, published tooling, or participation in security communities.
- Experience with program-level security metrics, vulnerability triage frameworks, and compliance programs (e.g., SOC2, FedRAMP context).
What We OfferWe're committed to creating an environment where you can thrive-professionally and personally. Our offerings include:
- Competitive Compensation We recognize and reward your contributions with a salary package that reflects your value.
- Comprehensive Benefits Including health, dental, and vision insurance, a 401(k) plan with company match, and generous paid time off to support your well-being.
- Flexible Work Environment Whether remote, hybrid, or in-office, we support work arrangements that promote productivity and balance.
- Inclusive & Collaborative Culture We foster a workplace where diverse perspectives are valued, teamwork is encouraged, and everyone has a voice.
Base pay offered is contingent on qualifications and other operational considerations. Base pay is just one piece of the full compensation structure offered at Tango. If this pay range is outside of your expectations, we still encourage you to apply and have a conversation with us.
Base pay offered for this position is: $140,000 - 200,000 (USD)
