Senior / Staff Security Engineer
Core
Operate, automate, and extend vulnerability management; run bug bounty programs; lead product security testing and incident response; own cloud/infra security posture on GCP/k8s/Postgres; build security tooling and automation.
Role type
Senior / Staff Security Engineer (Generalist)
Builds
Vulnerability management programs, bug bounty operations, security testing frameworks, incident response playbooks, cloud security hardening, and security automation tooling.
Domain
Cybersecurity, Cloud Infrastructure, Product Security
Required skills
Vulnerability management, Product/AppSec testing, Incident response, Cloud security, Code review (TypeScript), Threat modeling, Security automation, GCP, k8s, Postgres
Preferred skills
AI/LLM tooling for security tasks, Cloud security (GCP), TypeScript
Technologies
GCP, k8s, Postgres, Cloudflare, Node, GitHub Advanced Security, RunReveal, SentinelOne, Linear, Slack, Google Workspace, Vanta, Claude, ChatGPT
Responsibilities
Triage and drive remediation of vulnerabilities across product and infrastructure; validate and triage bug bounty reports; threat model new features and review code for security risks; lead security incident investigations and postmortems; harden cloud configurations and close security gaps; build and maintain security tooling and automation scripts.
Seniority
Senior, hands-on IC
