The RoleHands-on. You write production code most days. You own product and platform security, and you own finding queues and incident response until we hire for detection and response.
What you'll doProduct Security
- Threat model new systems and review designs with the teams that own them before they ship.
- Build the paved road: secure defaults, guardrails in CI, dependency and supply chain checks, so the safe way is the easy way.
- Own the vulnerability lifecycle: triage findings from Pensar, Semgrep, CodeQL, Dependabot, pentests, and inbound researcher reports; hold the SLAs; write the fix or get it written; track remediation to zero. Stand up our vulnerability disclosure program.
Platform Security
- Harden GCP and GKE: least-privilege IAM, workload identity, secrets, network policy, environment separation, all in Terraform.
- Secure our LLM, agent, and MCP surfaces: guardrails, sandboxes, agents as identities with scoped access, prompt injection detection.
Detection & Response
- Own detections in our SIEM, tune signal to noise, keep the runbooks current, stand up on the call rotation, and lead incidents end to end: triage, contain, investigate, remediate, post-mortem.
- Run tabletop exercises and hunt for what detections miss.
What we're looking for- 6+ years in security engineering, or software engineering with a security focus. You ship code and tools, not only findings.
- Depth in one of product security, cloud and platform security, or detection and response, and working knowledge of the other two.
- Comfortable changing production and owning the outcome. Python or Go, Kubernetes, Terraform, one major cloud.
- You can triage competing risks and trade security against velocity without slowing the team down.
- Clear writer: design reviews, runbooks and incident reports engineers actually read.
NICE TO HAVE
- Fintech, payments or another regulated industry. PCI DSS or SOC 2 evidence work.
- Bug bounty, red team, CVEs, talks, or open source.
- Hands-on AI security: guardrails, agent identities, prompt injection.
