Lead Security Engineer

Buffer; United States; Remote; USD 180,000 - 240,000; Full time

Job summary

Buffer is a fully distributed company building security-first software for a global audience. This role leads Buffer's security team as the technical leader, owning security strategy, incident response, and compliance for the organization.

You will define strategy, ship tooling, and integrate security into the development lifecycle. The role includes leading incidents, tabletop exercises, and coordinating on-call responses, plus safeguarding AI features and managing guardrails for safe

Qualifications

• Experience leading security teams and defining enterprise security strategy.
• Proven ability to drive security initiatives across product and engineering teams.
• Strong background in incident response, threat modeling, and compliance programs.
• Experience with AI security considerations and threat modeling for AI-enabled products.

Responsibilities

• Define the security strategy, roadmaps, and priorities for Buffer.
• Ship security tooling, automation, and processes with the engineering team.
• Integrate security into the development lifecycle, including threat modeling and dependency hygiene.
• Lead security incidents, drive tabletop exercises, and coordinate on-call responses.
• Secure the AI surface and manage guardrails for safe AI-enabled features.
• Own compliance programs and assist with security questionnaires and audits.

Skills

Security leadership

Incident management

Security operations

Strategic planning

Cross-functional collaboration

AI security

Job description

About the role

Buffer is a fully distributed company that builds social media and brand-building software. This role leads Buffer's security team as the tech lead, owning security strategy, incident response, and compliance for the organization.

What you'll do

• Define the security strategy, roadmaps, and priorities for Buffer
• Ship security tooling, automation, and processes with the engineering team
• Integrate security into the development lifecycle, including threat modeling and dependency hygiene
• Lead security incidents, drive tabletop exercises, and coordinate on-call responses
• Secure the AI surface and manage guardrails for safe AI-enabled features
• Own compliance programs and assist with security questionnaires and audits

What they're looking for

• Hands-on security leadership with experience in incident management and security operations
• Proven ability to define strategy, drive execution, and collaborate with product and engineering teams
• Experience with SOC 2, vendor risk, and compliance programs
• Strong emphasis on building secure systems and automating security tasks
• Comfort with a generalist security role and working in a high-trust, low-structure environment
• Experience with AI security considerations and threat modeling for AI-enabled products

For applicants in Nigeria

• The listing states a timezone range of UTC-3 to UTC+3; confirm whether this applies to Nigeria before interviewing
• Remote role with no explicit on-site requirement; the listing mentions global hiring; verify work authorization if needed
• Pay currency and salary range are not stated in the listing; confirm during interview process