Remote Senior Security Engineer - Cloud & AppSec Leader

Linear; Oregon; Hybrid; USD 150,000 - 230,000; Full time

Benefits offered by this job

Competitive salary + equity

Meal stipend & remote-friendly

Parental leave

Generous PTO

Remote-first with async collaboration

Job summary

Linear is hiring a Security Engineer to own hands-on security across product and infrastructure in a remote-first role open to North America. You will drive vulnerability management, incident response, threat modeling, and security testing for our cloud-native stack (GCP, Kubernetes, Postgres, Node).

Join a small, focused team that builds security tooling, uses AI to speed triage, and partners with GRC to ensure robust controls.

Qualifications

• 5+ years of security engineering experience across multiple domains.
• Hands-on and technical: reading code and reviewing designs.
• Experience in cloud environments (GCP a plus) and incident response.
• Ability to lead security testing and threat modeling of new features.
• Able to communicate technical findings to non-technical stakeholders.

Responsibilities

• Operate vulnerability management end-to-end and drive remediation.
• Run and manage bug bounty triage and coordination.
• Lead security testing and threat modeling for new features.
• Respond to security incidents and drive postmortems and hardening actions.
• Own parts of cloud/infra security posture (GCP/k8s/Postgres).
• Build and maintain security tooling and automation, leveraging AI/LLM tools.
• Collaborate with GRC/Trust to align findings with risk controls.

Skills

Security engineering

Vulnerability management

Incident response

Product/appsec testing

Cloud security

Code reading (TypeScript)

AI security tooling

Tools

GCP

Kubernetes

Postgres

Node.js

Cloudflare

GitHub Advanced Security

RunReveal

SentinelOne

Job description

Linear is hiring a Security Engineer to own hands-on security across product and infrastructure in a remote-first role open to North America. You will drive vulnerability management, incident response, threat modeling, and security testing for our cloud-native stack (GCP, Kubernetes, Postgres, Node).

Join a small, focused team that builds security tooling, uses AI to speed triage, and partners with GRC to ensure robust controls.