Senior Engineer, Security

Reverb; Illinois; Hybrid; USD 139,000 - 181,000; Full time

Benefits offered by this job

100% paid medical, dental, and vision coverage

401(k) matching

Generous PTO policy

Professional development opportunities

18 weeks parental leave

Paid sabbatical program

Job summary

Reverb is seeking a security professional to join our team of security engineers in a hybrid role. You will lead security initiatives to safeguard our systems and networks against threats.

This position requires extensive experience in security domains such as cloud and application security, proficiency with security tools, and strong problem-solving abilities. The role involves collaboration across teams and offers comprehensive benefits, including medical coverage and paid parental leave.

Qualifications

• Extensive experience in relevant security domains.
• Hands-on experience with various security tools.
• Excellent communication and collaboration skills.

Responsibilities

• Lead the design and implementation of security strategies.
• Conduct security assessments to identify vulnerabilities.
• Develop and enforce security policies across the organization.

Skills

Cloud Security

Application Security

DevSecOps

Corporate Security

Scripting (Python, Java, Bash, etc.)

Problem-solving

Communication Skills

Tools

EDR/XDR

WAF

SIEM

SAST/DAST

DLP

Terraform

AWS Security

Job description

About Reverb

Reverb is the largest online marketplace dedicated to buying and selling new, used, and vintage musical instruments. Since launching in 2013, Reverb has grown into a vibrant community of buyers and sellers around the world. By focusing on inspiring content, price transparency, musician‑focused e‑commerce tools, and a music‑savvy customer service team, we have created an online destination where the global music community can connect over the perfect piece of music gear.

About The Role

We are looking for a security professional to join our enthusiastic team of security engineers. Our team values collaboration, authenticity, feedback, creative problem‑solving, humility, and trust. Engineers work across multiple security domains—including application, cloud, and corporate security—and have opportunities to explore diverse security areas.

As a member of the team, you will safeguard our systems, code, networks, and customers from potential security threats. Your expertise will help build thoughtful solutions that balance operational needs, customer experience, and security requirements. This is a full‑time hybrid position reporting to the Senior Director, Infrastructure Engineering. Local candidates preferred, but fully remote U.S. candidates are considered.

Responsibilities

• Lead the design, implementation, and maintenance of comprehensive security strategies and solutions to protect our networks, systems, and applications.
• Conduct detailed security assessments to identify vulnerabilities and weaknesses in our infrastructure and applications.
• Develop and enforce security policies and standards across the organization.
• Collaborate with development and operations teams to integrate security practices into the software development lifecycle (SDLC).
• Keep up with emerging security threats, vulnerabilities, and industry trends to ensure proactive defense mechanisms.
• Lead incident response efforts, conduct post‑incident analysis, and implement corrective actions to prevent future occurrences.
• Mentor and guide junior security team members, fostering their professional growth and skills development.
• Engage peer teams in collaboration efforts to address security concerns and provide recommendations for risk reduction.
• Evaluate and select security technologies and tools to enhance the organization's security posture.

Requirements

• Extensive experience in any relevant security domain and deep knowledge of at least one of the following areas
  • Cloud Security
  • Application Security
  • DevSecOps
  • Corporate Security
• Familiarity with frameworks such as OWASP Top 10, CIS Controls, and NIST CSF
• Hands‑on experience with security tools such as EDR/XDR, WAF, SIEM, SAST/DAST, DLP, PAM, SOAR, CASB, etc.
• Proficiency in scripting and programming languages (e.g., Python, Java, Bash, Ruby, Node) to automate security tasks and assess vulnerabilities.
• Excellent problem‑solving skills and the ability to think critically under pressure.
• Strong communication skills to effectively collaborate with technical and non‑technical partners.
• Good data gathering skills to connect and triage issues.
• Proven track record of leading security initiatives and driving projects to successful completion.

Nice to Have

• Development experience in Ruby, Ruby on Rails, or Node
• Experience working with and implementing Terraform
• Familiarity with WAF or CDN technologies, including Cloudflare
• Hands‑on knowledge of AWS Security including: IAM, SecurityHub, Config, etc.
• Understanding of Kubernetes

Benefits

• 100% paid premiums for medical, dental, and vision coverage for the employee, spouse or domestic partner, and all eligible dependents. Medical coverage includes gender affirming care.
• Life, AD&​D, and supplemental long‑and short‑term disability insurance
• A matching 401(k)
• A generous PTO policy that includes vacation, sick/mental health days plus 11 paid holidays and two floating holidays
• Professional development and continued learning opportunities through access to mentoring, 1:1 coaching, and platforms like Skillsoft
• 18 weeks of gender‑neutral parental leave for the birth or adoption of a child
• Up to $25,000 reimbursement of adoption and/or surrogacy related expenses
• Paid sabbatical program
• Annual work/life stipend
• Ways to give back to your community through volunteer time off

Location

Remote‑eligible within the United States except Alaska and Hawaii.

Equal Opportunity

Reverb is an equal opportunity employer. We do not discriminate on the basis of race, color, ancestry, religion, national origin, sexual orientation, age, citizenship, marital or family status, disability, gender identity or expression, veteran status, or any other legally protected status. We will ensure that individuals with disabilities are provided a reasonable accommodation to participate in the job application or interview process, to perform crucial job functions, and to receive other benefits and privileges of employment. If, due to a disability, you need an accommodation during any part of the interview process, please let your recruiter know.

Pay Range

139,000 - 181,000 USD per year (US)