Security Engineer [IC3]

Overview

Job Description

Responsibilities

• - Contribute to the team's goals and deliverables for securing the largest deployment of Sourcegraph
• - Discover, fix, and mitigate infrastructure vulnerabilities
• - Enhance application security with audits, best practices, code fixes, and continuous education
• - Perform reactive incident response if a security event occurs
• - Enhance security measures and policies to support organizations
• - Work with other teams to triage, troubleshoot and mitigate customer concerns
• - Implement secure coding guidelines and best practices
• - Perform proactive research to detect new attack vectors
• - Perform threat modeling for existing and future applications
• - Assess and integrate new tools and technologies to improve operational efficiencies
• - Help maintain compliance with SOC 2, ISO 27001 & GDPR standards

Required Skills

• - Practical experience securing SaaS applications, including infrastructure security, application security, and/or compliance
• - Experience using and automating a wide range of defensive security tools
• - Experience developing software as an engineer
• - Experience working across engineering teams to support secure coding
• - High agency
• - Effective communication in writing and documentation
• - Nice to haves: Experience working in a startup environment, Experience with Go, TypeScript, Terraform, Experience with Kubernetes, GCP, Experience securing AI products

Benefits

• - Above-average salary
• - Equity
• - Generous perks & benefits