Staff Security Engineer

Responsibilities

• Own security across the stack—applications, services, infrastructure, and developer workflows.
• Proactively identify, assess, and mitigate risks in both infrastructure and application codebases.
• Lead secure code reviews, architecture discussions, and threat modeling sessions.
• Build tooling and automations that help prevent security issues before they reach production.
• Harden authentication and access control across internal and external surfaces.
• Partner closely with engineers across teams to design secure-by-default APIs, workflows, and deployments.
• Investigate vulnerabilities, respond to security incidents, and manage disclosure processes when needed.
• Stay current with security research, tooling, and threats—then put that knowledge into action.

Requirements

• Hands-on engineer who understands security from first principles.
• 6+ years of experience as a software engineer with an interest in security engineering.
• Led or heavily contributed to security engineering efforts across applications, infrastructure, or both.
• Analyze systems for weaknesses—whether they’re in business logic, configuration, or code.
• Experienced with threat modeling, secure coding practices, and vulnerability management.
• Worked with CI/CD systems, cloud platforms (AWS, GCP, etc.), and containerized environments.
• Translate security concerns into engineering action without being the “no” person.
• Excellent communicator and collaborator who can document and evangelize best practices.
• Responded to real-world security incidents, led postmortems, or driven remediation efforts.

Nice-to-Haves

• Experience with security reviews of WebRTC, media pipelines, or real-time systems.
• Contributions to open-source security tooling or research.
• Hands-on experience with static and dynamic analysis tools, fuzzing, or sandboxing.

Compensation

• Competitive salary and equity package.
• Health, dental, and vision benefits.
• Flexible vacations.
• Remote-friendly work environment, with equipment provided.