Security Engineer, Platform

Resend; Ireland; Remote; EUR 90,000 - 130,000; Full time

Job summary

Resend is seeking a security-focused engineer to join our Platform Squad. The role is fully remote across Americas or European timezones, with occasional travel to team offsites and conferences.

You will build and strengthen security foundations for our platform, helping secure APIs, IAM, secrets, and audit logging while shaping secure defaults for services and deployment pipelines. You will drive security as the first dedicated hire and champion practical, developer-friendly safeguards.

Qualifications

• Experience securing production infrastructure, cloud environments, APIs, developer platforms, or multi-tenant SaaS products.
• Able to read and write code and understand deployment code.
• Knowledge of authentication, authorization, secrets, IAM, logging, audit trails, incident response, and secure deployment pipelines.
• Experience as the first dedicated security hire and ability to drive priorities.
• Prefers practical improvements over heavy processes.
• Low-ego, direct, curious, and eager to learn.
• Care about developer experience and secure adoption.

Responsibilities

• Build and improve security foundations of Resend’s platform, including API keys, service permissions, secrets management, tenant isolation, audit logs, and internal access controls
• Help design secure defaults for new services, workers, queues, databases, internal tools, and deployment pipelines
• Improve detection and response for suspicious access, leaked credentials, abnormal sending behavior, privilege changes, and sensitive system events
• Review and update our processes/pipelines so that security is “built-in”, not “bolt-on”
• Raise the security bar

Skills

Security foundations

Cloud security

API security

IAM / authentication

Incident response

Developer experience focus

Security tooling

Tools

AWS

Terraform

Kubernetes

Cloudflare

Job description

Resend is growing fast, and there are now over 4 million developers using it. As the Platform Squad, we are responsible for the internal platform and reliability foundations that let Resend teams build, deploy, observe, and operate services safely. This role is fully remote based in Americas or European timezones, with some expected travel for team offsites, conferences, meetups, and more. Read more about how we work, how we hire, and what we value here.

In this role, you will…

• Build and improve the security foundations of Resend’s platform, including API keys, service permissions, secrets management, tenant isolation, audit logs, and internal access controls
• Help design secure defaults for new services, workers, queues, databases, internal tools, and deployment pipelines
• Improve detection and response for suspicious access, leaked credentials, abnormal sending behavior, privilege changes, and sensitive system events
• Review and update our processes/pipelines so that security is “built-in”, not “bolt-on”
• Raise the security bar

You will be a great fit if you…

• Have experience securing production infrastructure, cloud environments, APIs, developer platforms, or multi-tenant SaaS products
• Can write code and are comfortable reading application, infrastructure, and deployment code
• Understand authentication, authorization, secrets, IAM, logging, audit trails, incident response, and secure deployment pipelines
• Independently prioritize and drive your day-to-day as the first dedicated security hire
• Prefer practical improvements over heavy processes
• Are low-ego, direct, curious, and willing to learn from others
• Care about developer experience and believe security should be easy to adopt

You will be an exceptional fit if you also…

• Have experience with email infrastructure, transactional email, sender reputation, domain verification, SPF, DKIM, DMARC, webhooks, or abuse prevention
• Have secured cloud infrastructure using tools like AWS, Terraform, Kubernetes, Cloudflare, or s