Sr. Software Engineer, Security (Pipedream)
Core
Building and maintaining end-to-end platform security, including tooling, threat modeling, audits, and hands-on vulnerability patching for a high-scale integration platform.
Role type
Senior individual contributor security engineer
Builds
Public-facing APIs, code execution environments, and high-volume event processing pipelines
Domain
Cloud infrastructure security and application security for developer platforms
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
vulnerability management, threat modeling, risk analysis, cloud security (AWS/GCP), incident response, compliance frameworks (SOC 2, HIPAA), polyglot codebase navigation
Preferred skills
offensive security (penetration testing, red teaming), Kubernetes/Docker security, building adopted security programs
Technologies
TypeScript, Rust, Kotlin, Ruby, AWS, GCP, Redis, Datadog, Kubernetes, Docker
Responsibilities
Finding and patching vulnerabilities in code and dependencies; building and maintaining the platform's threat model; securing cloud infrastructure and third-party vendors; leading incident response for critical security issues; owning SOC 2, HIPAA, and penetration tests; partnering with Workday's security team on policy translation
Seniority
Senior, hands-on IC
