Security Engineer [IC3]

Within one month: onboard to the alerting and monitoring stack and participate in on-call rotations; discover, fix, and mitigate infrastructure vulnerabilities by updating libraries, base images, and analyzing containers. Within three months: maintain internal systems and automations that assist in alert triaging; work with other teams to triage, troubleshoot, and mitigate customer security concerns; enhance application security with audits, best practices, code fixes, and continuous education; perform reactive incident response if a security event occurs. Within six months: perform proactive research to detect new attack vectors; perform threat modeling for existing and future applications; assess and integrate new tools and technologies to improve operational efficiencies; help maintain compliance with SOC 2, ISO 27001 & GDPR standards.

Practical experience reviewing SIEM alerts and participating in on-call rotations. Practical experience securing SaaS applications as a security generalist, including infrastructure security, application security, and/or compliance. Experience with Go, including writing and maintaining internal tooling along with code reviews. Experience with Elastic stack and GCP. Experience using and automating a wide range of defensive security tools. Experience working across engineering teams to secure projects across the organization. High agency and effective written communication. Nice to haves: Experience developing software as an engineer; startup environment experience; TypeScript and Terraform; Kubernetes; securing AI products.