Staff Security Engineer

Responsibilities

• Improve Socket's security posture: own application security, cloud infrastructure hardening, operational security, and IT security.
• Write code and build tooling to make the secure path the default for engineers.
• Roll out identity and access controls, close gaps across the stack, and continuously reduce risk.
• Assess, prioritize, and drive the security roadmap; balance quick wins with longer-term improvements.
• Run incident response and external security operations: build 24/7 process, triage vulnerability reports, manage pentests, coordinate fixes.
• Maintain SOC 2 compliance and drive new certifications (e.g., ISO 27001).
• Raise security awareness: train engineers, run phishing simulations, build trust with teams.

Requirements

• Owned security broadly at a growth-stage company or strong software engineer moving into full security ownership.
• Ship production TypeScript.
• Breadth across security domains (AppSec, CloudSec, OpSec) with fast learning.
• Fluent in cloud infrastructure (GCP): VPCs, IAM, secret management, networking.
• Self-directed operator who executes across fronts without direction.

Nice-to-Haves

• Communication and teaching skills to foster security culture.

Benefits

• Market competitive salary bands.
• Meaningful equity program.
• Comprehensive health benefits.
• Flexible time-off, holidays, winter shutdown.
• Paid parental leave.
• Remote-first with quarterly off-sites.