Staff Security Engineer
Core
Design and build product security features, define security baselines for cloud/Kubernetes, and lead multi-quarter remediation of systemic engineering risks for AI features and the software development lifecycle.
Role type
Staff Security Engineer (Product & Infrastructure)
Builds
SSO, SCIM, access controls, audit logging, encryption, key management, and centralized secrets management strategies.
Domain
Cloud Security, Kubernetes Security, AI/LLM Security, Software Development Lifecycle Security
Required skills
Threat modeling, secure design review, SSO/SAML/OIDC implementation, Kubernetes security (RBAC, network policies, admission control), secrets management, GCP/AWS IAM, Terraform, AI/LLM security (prompt injection, agent tool use), cross-team influence, GitHub organization security, code review.
Preferred skills
Multi-tenant SaaS experience, software supply chain security, service mesh, zero-trust networking, AI governance, SOC 2/ISO 27001 controls, CKS/OSWE/OSCP certification.
Technologies
GCP, AWS, Terraform, Kubernetes, GitHub Actions, Mixpanel, Claude Code
Responsibilities
Partner with product managers and engineers to threat model initiatives and define security requirements; Design and build product security features including SSO, SCIM, access controls, audit logging, encryption, and key management; Identify systemic engineering risks and lead multi-quarter remediation through secure defaults, shared libraries, and guardrails; Define and drive security baselines for cloud and Kubernetes environments; Set Mixpanel's security approach for AI features, agents, coding tools, MCP integrations, and vendors; Harden the software development lifecycle and manage GitHub organization and pipeline security controls; Define and implement a centralized secrets management strategy; Build trusted relationships with engineering and product leaders, influence roadmaps, and mentor security engineers.
Seniority
Staff, hands-on IC with mentorship and strategy