Security Engineering Lead for Developer Tools

United States Digital Space LLC; San Mateo (CA); On-site; USD 200,000 - 300,000; Full time

Benefits offered by this job

Healthcare coverage

Mental health support

Parental leave

Flexible PTO

Professional development stipend

Wellness programs

Job summary

the company is seeking a security engineering leader to collaborate with the Developer Experience team. You will perform threat models, security design reviews, and refine security tools that secure the SDLC while defining security roadmaps and priorities.

You will collaborate with engineering and product teams to advance product security, build and operate a bug bounty program, and mentor peers in security practices.

Qualifications

• Bachelor's degree in CS or equivalent.
• 7+ years in security or related roles.
• Experience with AWS/GCP.
• Strong security design and threat modeling skills.
• Proficient in Python or Go.
• Excellent communication and collaboration.

Responsibilities

• Facilitate security baked into applications across the software development lifecycle.
• Advise on security design and threat modeling for Architectures and features.
• Collaborate with engineering and product teams to improve product security.
• Lead and refine security tooling and secure defaults.
• Create and operate a bug bounty program and triage findings.
• Partner with CISO and security teams to grow the security program.

Skills

AWS/GCP experience

Threat modeling

Security architecture

Security design reviews

Python/Go coding

Code review

Open Policy Agent

SIEM

Communication

Team collaboration

Education

Bachelor of Science in Computer Science or equivalent

Tools

Open Policy Agent

SIEM

Job description

the company is seeking a security engineering leader to collaborate with the Developer Experience team. You will perform threat models, security design reviews, and refine security tools that secure the SDLC while defining security roadmaps and priorities.

You will collaborate with engineering and product teams to advance product security, build and operate a bug bounty program, and mentor peers in security practices.