Security Engineer, Platform

Resend; Brasil; Teletrabalho; BRL 697 000 - 797 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Fully remote team

Resumo da oferta

Resend is seeking a dedicated security engineer to join the Platform Squad and strengthen internal security foundations across production infrastructure and multi-tenant environments.

You will implement IAM controls, audit logs, secrets management, and secure deployment pipelines, while improving detection and incident response capabilities. The role is fully remote across the Americas or Europe, with occasional travel for offsites and meetups.

Qualificações

• Experience securing production infrastructure, cloud environments, APIs, or multi-tenant SaaS products.
• Ability to write code and read application, infrastructure, and deployment code.
• Understanding of authentication, authorization, secrets, IAM, logging, audit trails, incident response, and secure deployment pipelines.

Responsabilidades

• Build and improve platform security foundations, including API keys, service permissions, secrets management, tenant isolation, audit logs, and internal access controls.
• Design secure defaults for services, workers, queues, databases, internal tools, and deployment pipelines.
• Improve detection and response for suspicious access, leaked credentials, abnormal sending behavior, privilege changes, and sensitive events.
• Review processes and pipelines so security is built in; raise the security bar.

Conhecimentos

Security engineering

Platform security

IAM

Audit logging

Incident response

Secrets management

Threat detection

Ferramentas

Cloud platforms

Open-source security

Descrição da oferta de emprego

The Platform Squad builds the internal platform and reliability foundations that let Resend teams build, deploy, observe, and operate services safely.

The role is fully remote in the Americas or European time zones, with occasional travel for team offsites, conferences, and meetups.

In this role, you will Build and improve platform security foundations, including API keys, service permissions, secrets management, tenant isolation, audit logs, and internal access controls.

Design secure defaults for services, workers, queues, databases, internal tools, and deployment pipelines.

Improve detection and response for suspicious access, leaked credentials, abnormal sending behavior, privilege changes, and sensitive events.

Review processes and pipelines so security is built in; raise the security bar.

You will be a great fit if you

• Have secured production infrastructure, cloud environments, APIs, developer platforms, or multi-tenant SaaS products.
• Can write code and read application, infrastructure, and deployment code.
• Understand authentication, authorization, secrets, IAM, logging, audit trails, incident response, and secure deployment pipelines.
• Can independently prioritize your work as the first dedicated security hire and prefer practical improvements over heavy processes.
• Care about developer experience and believe security should be easy to adopt.
• It is a plus if you have Experience with email infrastructure, SPF, DKIM, DMARC, webhooks, abuse prevention, cloud infrastructure, open-source security, supply-chain security, SOC 2, ISO 27001, GDPR, or security observability.

What it means to join the team

Autonomy, ownership, flexible schedules, and a modern development stack.

Honest, low-ego, fully remote team.

Compensation: $140,000–$160,000 USD, commensurate with experience.