Security Engineer - Secure-by-Design & Automation

Sentry; San Francisco (CA); On-site; USD 155,000 - 400,000; Full time

Job summary

Sentry, a leading developer-first company, is seeking a Security Engineer to join the Security Team as we secure our customers, code, and platform. You’ll work across application and cloud security, shaping secure coding practices and building security into engineering workflows.

You’ll collaborate with product and engineering teams to influence feature design from the start and help drive mature vulnerability management and threat modeling programs at scale.

Qualifications

• 2+ years of industry experience designing, building, or securing complex applications and cloud systems.
• Degree in Computer Science or a related field, equivalent training, or professional experience.
• Hands-on experience with security reviews, SDLC practices, secure CI/CD, architecture reviews, threat modeling, vulnerability management, bug bounty and responsible disclosure programs.
• Experienced and comfortable programming in at least one language, and able to read and reason about code in Python, Typescript, Go, or Rust.
• Familiarity with distributed cloud technology (AWS, GCP, Azure, Kubernetes, Docker, Terraform, etc.) and understanding of how those technologies are secured.

Responsibilities

• Support and mature Sentry's security review program from secure code review to architecture review and threat modeling.
• Contribute to vulnerability management including intake, triage, remediation tracking, and bug bounty support.
• Embed secure-by-design principles by partnering with engineering and product teams to inject security early in the lifecycle.

Skills

Security reviews

Threat modeling

Vulnerability management

CI/CD security

Python

TypeScript

Go

Rust

Education

Degree in Computer Science or related field

Tools

AWS

GCP

Azure

Kubernetes

Docker

Terraform

Job description

Sentry, a leading developer-first company, is seeking a Security Engineer to join the Security Team as we secure our customers, code, and platform. You’ll work across application and cloud security, shaping secure coding practices and building security into engineering workflows.

You’ll collaborate with product and engineering teams to influence feature design from the start and help drive mature vulnerability management and threat modeling programs at scale.