Remote Senior Security Engineer — Cloud, AppSec & Incidents

Bazeta; United States; Remote; USD 170,000 - 230,000; Full time

Benefits offered by this job

Competitive salary and equity

Remote-first with async collaboration

Generous vacation and parental leave

Co-working stipend

Job summary

Linear is a remote-first company hiring a Senior/Staff Security Engineer to own hands-on security work across product and infrastructure in a scalable, AI-assisted security program. The role emphasizes threat modeling, vulnerability management, incident response, and cloud security within a Google Cloud/k8s/Postgres stack.

Collaboration with engineers and GRC/Trust is key to stay ahead of threats. You’ll operate across vulnerability triage, bug bounty, product security testing, and incident

Qualifications

• 5+ years of security engineering experience with breadth across at least two areas (vuln mgmt, appsec, IR, cloud security)
• Hands-on and technical; able to read and reason about code (TypeScript)
• Skilled in cloud environments, with GCP experience a plus
• Calm under pressure; capable of leading incidents and postmortems
• Autonomy; able to set priorities and work independently
• Strong communication; able to explain technical findings to non-technical stakeholders

Responsibilities

• Operate, automate, and extend vulnerability management across product and infra
• Lead our bug bounty triage and remediation efforts
• Lead product security testing, threat modeling, and code reviews
• Respond to security incidents; drive containment and postmortems
• Harden cloud/postgres/k8s configurations and security posture
• Build security tooling and AI-assisted automation to scale the program

Skills

Vulnerability management

Product security

Incident response

Cloud security

Code reading

GCP

Tools

GitHub Advanced Security

RunReveal

SentinelOne

Job description

Linear is a remote-first company hiring a Senior/Staff Security Engineer to own hands-on security work across product and infrastructure in a scalable, AI-assisted security program. The role emphasizes threat modeling, vulnerability management, incident response, and cloud security within a Google Cloud/k8s/Postgres stack.

Collaboration with engineers and GRC/Trust is key to stay ahead of threats. You’ll operate across vulnerability triage, bug bounty, product security testing, and incident