Remoote.app

Work from anywhere. Start here.

Free resume builderCompaniesLog in
Apply

Staff Security Engineer

Posted 17 days agoViewed

View full description

💎 Seniority level: Staff, 5+ years

📍 Location: US, EST, PST, EU

🔍 Industry: Software Development

🏢 Company: Linear

🗣️ Languages: English

⏳ Experience: 5+ years

🪄 Skills: Node.jsCybersecurityGCPJavascriptKubernetesTypeScriptCI/CDComplianceRisk Management

Requirements:
  • 5+ years of experience in application and infrastructure security
  • Startup experience
  • Strong communication skills and ability to interact with customers
  • Deep understanding of threat modeling, risk management, and vulnerability assessment methodologies
  • Strong AWS or GCP (preferred) experience
  • Experience with secure API development, infrastructure security, and addressing emerging security challenges
  • Background in Javascript/Typescript and Node.js, and familiarity with secure coding practices
  • Hands-on experience with security tools and experience integrating automated security testing into CI/CD pipelines
Responsibilities:
  • Own application and infra security (GCP, k8s), and drive improvements to our overall security posture and practices
  • Define and drive the product security vision, strategies, and best practices across product and infrastructure teams
  • Help build best-in-class security controls for Linear’s product
  • Manage pentesting and other security and compliance related partners
  • Work closely with go-to-market teams to communicate our security posture to customers
  • Assess and improve the security posture of supporting infrastructure and third-party integrations
  • Coordinate security incident response efforts, conduct root cause analyses, and coordinate remediation across teams
  • Collaborate with operations on SOC2 compliance and vendor security audits
Apply

Related Jobs

Apply
🔥 Staff Security Engineer for Threat Intel
Posted 12 days ago

📍 United States

💸 230000.0 - 275000.0 USD per year

🔍 Software Development

🏢 Company: CoreWeave💰 $642,000,000 Secondary Market over 1 year agoCloud ComputingMachine LearningInformation TechnologyCloud Infrastructure

  • 15+ years of experience in cyber threat intelligence, threat hunting, or security operations, with a focus on cloud environments.
  • Deep understanding of threat actor tactics, attack frameworks (MITRE ATT&CK), and malware analysis methodologies.
  • Experience with cyber threat intelligence platforms (TIPs), SIEM, SOAR, and EDR solutions.
  • Proficiency in scripting languages (Python, Bash, etc.) for automating threat intelligence workflows.
  • Strong knowledge of cloud security best practices, particularly in containerized and GPU-accelerated cloud environments.
  • Familiarity with dark web monitoring, intelligence collection techniques, and adversary tracking.
  • Excellent written and verbal communication skills for conveying intelligence insights to technical and non-technical audiences.
  • Experience in securing AI/ML workloads, high-performance computing (HPC), or GPU-accelerated environments.
  • Hands-on experience with security tools like MISP, YARA, Suricata, Zeek, or Sigma rules.
  • Prior experience working in fast-paced, cloud-native, or high-growth technology companies.
  • Develop, maintain, and operationalize a comprehensive threat intelligence program to proactively detect, analyze, and respond to cyber threats.
  • Collect, analyze, and disseminate threat intelligence from open sources (OSINT), dark web monitoring, and proprietary sources.
  • Identify and track threat actors, tactics, techniques, and procedures (TTPs) relevant to CoreWeave’s industry and cloud infrastructure.
  • Collaborate with incident response teams to investigate and contain security incidents using intelligence-driven insights.
  • Conduct proactive threat hunting activities to detect potential compromises or anomalous behavior in CoreWeave’s cloud environments.
  • Develop and maintain threat intelligence automation pipelines to ingest, normalize, and correlate data from multiple sources.
  • Implement threat intelligence feeds, SIEM integrations, and enrichment processes to enhance real-time security monitoring.
  • Work closely with security engineering, SOC, and DevOps teams to integrate threat intelligence into security workflows.
  • Provide regular briefings, reports, and recommendations on emerging threats, vulnerabilities, and mitigations to executive leadership and security teams.
  • Represent CoreWeave in threat intelligence sharing communities, industry forums, and external collaborations.

AWSDockerPythonBashCiscoCloud ComputingCybersecurityData AnalysisKubernetesMachine LearningAPI testingCommunication SkillsAnalytical SkillsCollaborationRESTful APIsLinuxReportingJSONScripting

Posted 12 days ago
Apply
Apply
🔥 Staff Security Engineer
Posted 17 days ago

📍 USA, Canada, Japan, Hungary, Nigeria, Brazil, United Kingdom

🧭 Full-Time

🔍 Financial Services

🏢 Company: Alpaca

  • Experience with implementing and maintaining SIEM/SOAR and automation solutions, and other security tools
  • Experience with cloud-centric environments and cybersecurity capabilities, including a strong understanding of Kubernetes security concepts
  • Strong analytical and problem-solving skills
  • Excellent communication skills and committed to work collaboratively across the Firm
  • Available for on-call rotations and after-hour responses as needed
  • Lead and triage security events including potential security incidents, insider threats, malware infections, unauthorized access, fraud, and data exfiltration events
  • Conduct thorough analyses of events, assess impact, and implement corrective actions by collaborating with cross-functional teams to prioritize and remediate issues as necessary
  • Develop and maintain security incident response playbooks and automate security workflows to improve efficiency and effectiveness
  • Conduct Threat Hunting activities to identify potential issues and implement strategies for proactive threat detection
  • Manage and optimize security tools and technologies, such as SIEM, SOAR, Container Orchestration like Kubernetes, Docker / Docker Swarm and other relevant solutions
  • Enhance the security of our CI/CD pipeline by integrating security measures into GitOps and focus on brainstorming, designing, building, deploying, and managing cloud-native security
  • Collaborate with Product and Engineering to ensure secure design and implementation of systems and applications
  • Lead and assist with vulnerability management, penetration testing, and red teaming activities, including managing our bug bounty program
  • Foster strong cross-functional relationships with IT, Engineering, Compliance, and other stakeholders to ensure alignment and effective security practices
  • Assist with compliance audits and assessments as necessary
  • Conduct security research and contribute to the development of new security tools and techniques.

DockerPythonCloud ComputingCybersecurityGitKubernetesAPI testingCI/CDRESTful APIsDevOpsJSONScripting

Posted 17 days ago
Apply
Apply
🔥 Senior/ Staff Security Engineer, Detection and Response
Posted 30 days ago

📍 US

🧭 Full-Time

💸 168000.0 - 220000.0 USD per year

🔍 Mental Healthcare

🏢 Company: Grow Therapy👥 251-500💰 $88,000,000 Series C 12 months agoMental HealthTherapeuticsMedicalHealth Care

  • 5+ years (Senior) or 8+ years (Staff) of full time experience as a Detection and Response Engineer, working on monitoring, threat detection and incident response
  • Have led the development of company-wide detection and response strategies
  • Have demonstrated experience designing detection strategies in complex, high-scale environments
  • Are familiar with automated vulnerability identification tools and triage processes
  • Detect, respond and defend against threats to Grow’s user base
  • Define and drive our Threat Detection roadmap
  • Mature our Incident Response and Remediation processes
  • Respond to security events, triage, perform investigations, incident analysis, and communicate clearly and efficiently to stakeholders
  • Collaborate with Grow engineering teams to drive remediations
  • Build and optimize detection rules
  • Develop runbooks and incident playbooks for new and existing detections

CybersecurityCI/CDLinuxDevOpsScripting

Posted 30 days ago
Apply
Apply
🔥 Staff Security Engineer
Posted about 1 month ago

📍 United States

💸 184000.0 - 253000.0 USD per year

🔍 Healthcare

🏢 Company: Thirty Madison👥 251-500💰 $140,000,000 Series C almost 4 years ago🫂 Last layoff over 2 years agoPharmaceuticalPersonal HealthWellnessHealth Care

  • Proven expertise in security incident response and detection engineering, with a strong focus on cloud environments.
  • Ability to partner closely with the Head of Security to drive forward security initiatives and strategies.
  • Experience adopting an automation- and development-driven approach to implement security controls.
  • Strong skills in threat modeling and identifying security risks.
  • Establish and track key KPIs to ensure the security program remains robust, enabling data-driven decision-making.
  • Leadership experience in designing and executing security control strategies, driving iterative design, and taking ownership of security products.
  • Exceptional collaboration skills, with the ability to work seamlessly with diverse teams, including engineers, medical professionals, and external partners.
  • A proactive mindset with a strong drive to take ownership of issues and solve them independently in a fast-paced, evolving environment.
  • A passion for educating and evangelizing security best practices, backed by excellent written and verbal communication skills.
  • Several years of experience leading cross-functional initiatives, especially bridging security engineering with infrastructure teams, with a proven track record of delivering impactful projects that align with business objectives.
  • Familiarity with Kubernetes and microservices architectures.
  • Experience deploying and securing cloud services (e.g., AWS, Azure) with a deep understanding of cloud security principles.
  • Strong proficiency in scripting and programming languages (e.g., Python, Bash) for data analysis, automation, and tool development.
  • Hands-on experience with Terraform for infrastructure management and automation.
  • Act as a hands-on subject matter expert (SME) for the Detection and Response program, while also taking ownership of broader security initiatives, including Enterprise Security and Product Security at Thirty Madison.
  • Design and implement scalable solutions and processes to proactively identify, address, and mitigate security vulnerabilities and risks.
  • Conduct research on emerging threats impacting Thirty Madison’s applications and infrastructure.
  • Strengthen defense-in-depth strategies by developing secure-by-default frameworks, architectures, and processes.
  • Provide mentorship and share security best practices across the organization.
  • Collaborate with cross-functional teams to ensure security efforts align with business objectives and integrate smoothly into existing workflows.
  • Lead investigations, containment, and remediation of security incidents, ensuring swift resolution.
  • Demonstrate strong leadership under pressure, making informed decisions in uncertain situations while coordinating efforts across teams to resolve issues effectively

AWSLeadershipPythonSQLBashCloud ComputingCybersecurityData AnalysisKubernetesLDAPMicrosoft AzureMicrosoft ExchangeCross-functional Team LeadershipAPI testingAzureCommunication SkillsAnalytical SkillsCollaborationCI/CDProblem SolvingRESTful APIsMentoringLinuxDevOpsTerraformOrganizational skillsDocumentationMicroservicesComplianceExcellent communication skillsTeamworkJSONRisk ManagementScriptingDebugging

Posted about 1 month ago
Apply
Apply
🔥 Staff Security Engineer
Posted about 1 month ago

📍 United States

🧭 Full-Time

💸 180000.0 - 220000.0 USD per year

🔍 Healthcare

  • 5+ years of experience as a Staff Security Engineer on a high-growth startup team.
  • Strong knowledge of cloud security (AWS, Azure), identity management, application security, modern security frameworks (ie OWASP, NIST) and HIPAA regulatory experience.
  • Diverse experience with application security tooling and processes that include code review, SAST, penetration testing, and risk management.
  • High proficiency with source code management tools and security features of each(e.g., Github, Bitbucket)
  • Proficiency in at least one programming language (Python, Go, or similar) and experience integrating security into DevOps CI/CD pipelines.
  • Ability to assess risk, anticipate attack vectors, and proactively mitigate threats through layered security.
  • Ability to work cross-functionally with engineering, IT, compliance, and leadership to drive security initiatives forward.
  • Architect and implement security solutions that scale with the company’s growth, focusing on automation, resilience, and developer & user-friendly security.
  • Build tools with an emphasis on self-service, automation, and performance that identify and mitigate application security risks and flaws.
  • Eliminate classes of security problems by shifting the detection and preventions left into the developer workflow.
  • Provide architectural, design, and threat-based guidance to software development teams to improve security maturity before code is created.
  • Work with SecOps to enhance our ability to detect threats early and respond effectively.
  • Partner with our DevOps team to assess infrastructure security and propose improved security solutions.
  • Partner with cross-functional teams to ensure security maturity work is being prioritized and addressed in ways both timely and durable.
  • Ensure security controls align with HIPAA framework without impeding development and productivity velocity.

AWSPythonSQLCloud ComputingCybersecurityKubernetes*NixAPI testingAzureGoCI/CDProblem SolvingRESTful APIsLinuxDevOpsTerraformMicroservicesComplianceJSONRisk ManagementAnsibleScriptingSoftware Engineering

Posted about 1 month ago
Apply
Apply
🔥 Staff Security Engineer - Data Protection (Data Security Architect), Remote
Posted about 2 months ago

📍 United States, Canada

🧭 Full-Time

🔍 Data Security

NOT STATED
  • Design, implement, and maintain security services.
  • Partner cross-functionally across various teams.

AWSCloud ComputingCybersecurityData engineeringMicroservicesComplianceData management

Posted about 2 months ago
Apply
Apply
🔥 Staff Security Engineer - Data Protection (Data Security Architect), Remote
Posted about 2 months ago

📍 United States, Canada

🧭 Full-Time

🔍 Health-Tech

  • BS/BTech in Computer Science, IT, Cybersecurity, or related field
  • 8+ years securing Cloud Native applications
  • 5+ years in a dedicated data security role
  • Familiarity with DLP and DSPM tools
  • Knowledge of health-tech systems preferred
  • Lead development and maintenance of security strategies
  • Design and deploy security controls
  • Mentor new engineers
  • Shape security services strategy

Cloud ComputingCybersecurity

Posted about 2 months ago
Apply
Apply
🔥 Staff Security Engineer, Data Protection
Posted 2 months ago

📍 USA

🧭 Full-Time

💸 154000.0 - 216000.0 USD per year

🔍 Security

🏢 Company: SandboxAQ👥 101-250💰 $25,000,000 Grant 5 months agoArtificial Intelligence (AI)SaaSInformation TechnologyCyber Security

  • Experienced in managing confidentiality, integrity and availability of data within cloud environments, both manually and through automation
  • Have an understanding of industry best practices and tooling, including their limitations
  • Proficient in risk-based decision making as it applies to data classification
  • Have worked with CUI data and are familiar with CMMC 2.0 / NIST 800-171 controls
  • Able to develop sensible data retention policies
  • Strong communication skills and ability to work across different groups to build consensus on scalable data design patterns
  • Work cross-functionally to ensure security and privacy of SandboxAQ and customer data
  • Develop strategies and automation around data classification and monitoring
  • Work within AWS and GCP environments making sure our systems are configured correctly and architected following best security practices
  • Assist product teams in design of multi-tenant SaaS products
  • Act as the steward of CUI data within our organization
  • Automate vulnerability detection, data loss prevention (DLP), and privacy incident response across cloud platforms
  • Collaborate with the development, DevOps, and InfoSec team to integrate privacy solutions into CI/CD pipelines
  • Document privacy architectures, data flows, and technical implementations

AWSPythonCybersecurityGCPCI/CDTerraformComplianceRisk ManagementData modeling

Posted 2 months ago
Apply
Apply
🔥 Staff Security Engineer - Cryptography & Key Management
Posted 2 months ago

📍 U.S.

💸 167100.0 - 244200.0 USD per year

🔍 Financial technology

🏢 Company: Marqeta👥 1001-5000💰 Post-IPO Equity almost 4 years ago🫂 Last layoff almost 2 years agoCryptocurrencyDebit CardsCredit CardsPaymentsFinTech

  • A minimum of 8 years related experience with a Bachelor’s degree; or 5 years and a Master’s degree; or a PhD with 3 years’ experience.
  • 5+ years of professional experience within data security including encryption, tokenization, PKI implementation and key management.
  • 4+ years of in-depth experience working with payment and/or general-purpose HSMs, cloud KMSs.
  • 4+ years of practical experience in encryption algorithms (e.g., AES, RSA), protocols (e.g., TLS/SSL), key management, secrets management.
  • 3+ years with cloud computing architectures and Infrastructure as Code (e.g., Terraform).
  • 2+ years working experience with security regulatory/compliance requirements including PCI, NIST and GDPR.
  • 2+ years experience with data security, classification and posture management tooling.
  • Strong collaboration and communication skills.
  • Problem-solving skills to navigate complexity and security risks.
  • Lead the development of enterprise-level data security architecture and strategies.
  • Define encryption and secrets management standards, ensuring alignment with product development and enterprise needs.
  • Collaborate closely with security, technology, and privacy teams to implement and maintain standards.
  • Deploy, configure, and manage cloud-based Key Management Services (KMS) and Hardware Security Modules (HSMs).
  • Participate in Proof of Concept (POC) testing for new cryptographic products and services.
  • Serve as a key custodian, overseeing the full lifecycle of sensitive key material.
  • Maintain and update data security tooling such as DSPM and DLP solutions.
  • Ensure compliance with evolving security standards like PCI-DSS and FIPS.
  • Provide operational support, including on-call rotation and documenting critical procedures.

AWSCloud ComputingCybersecurityTerraform

Posted 2 months ago
Apply
Apply
🔥 Staff Security Engineer - Cryptography & Key Management
Posted 2 months ago

📍 United States

🧭 Full-Time

💸 167100.0 - 244200.0 USD per year

🔍 Data security

🏢 Company: MQ Referrals Only

  • A minimum of 8 years related experience with a Bachelor’s degree; or 5 years and a Master’s degree; or a PhD with 3 years’ experience.
  • 5+ years of professional experience within data security including encryption, tokenization, PKI, and key management.
  • 4+ years of experience with payment and general-purpose HSMs and cloud KMSs.
  • 4+ years of practical experience in encryption algorithms (e.g., AES, RSA) and key management.
  • 3+ years with cloud computing architectures and Infrastructure as Code (e.g., Terraform).
  • 2+ years with compliance requirements including PCI, NIST, and GDPR.
  • Lead the development of enterprise-level data security architecture and strategies.
  • Define encryption and secrets management standards.
  • Collaborate closely with security, technology, and privacy teams.
  • Deploy and manage cloud-based Key Management Services (KMS) and Hardware Security Modules (HSMs).
  • Oversee the lifecycle of sensitive key material.
  • Maintain and update data security tooling.
  • Ensure compliance with security standards like PCI-DSS and FIPS.
  • Provide operational support, including on-call rotation.

AWSCloud ComputingKubernetesTerraformCompliance

Posted 2 months ago
Apply