Senior Security Engineer — Core Platform & SDLC

Mosaic.tech; San Mateo (CA); On-site; USD 200,000 - 300,000; Full time

Benefits offered by this job

Healthcare coverage

Parental leave

Professional development

Wellness benefits

Commuter benefits

Job summary

Verkada is seeking a security engineering leader to partner with the Core Command team. You will perform threat models, security design reviews, and refine tools that secure the SDLC, expanding core services like Authentication, Authorization, Users, Roles, and Audit.

You’ll drive the security roadmap, collaborate with product and engineering leaders, and establish secure defaults across web, mobile, and backend systems. A strong focus on mentoring and security culture is expected.

Qualifications

• Bachelor's degree in Computer Science or equivalent.
• Strong experience with AWS, GCP or other cloud service providers.
• 7+ years as a security engineer in an advisory role.
• Understanding of security weaknesses, exploits, attacks and mitigations.
• Experience with learning about new security products, features, and strategies.
• Coding ability in Python/Go; write automation scripts.

Responsibilities

• Integrate security into applications throughout the SDLC.
• Lead threat models and security design reviews.
• Define security roadmap and priorities for core services (Auth, Users, Roles, Audit).
• Set up security tooling and secure defaults across platforms.
• Collaborate with engineering leaders to align goals and processes.
• Create and operate a bug bounty program.
• Triage security bugs from tools and third-party assessments.

Skills

Security engineering

Threat modeling

Security design reviews

Architectural analysis

Communication

Python/Go coding

Education

Bachelor of Science in Computer Science

Tools

AWS

GCP

Python

Go

Job description

Verkada is seeking a security engineering leader to partner with the Core Command team. You will perform threat models, security design reviews, and refine tools that secure the SDLC, expanding core services like Authentication, Authorization, Users, Roles, and Audit.

You’ll drive the security roadmap, collaborate with product and engineering leaders, and establish secure defaults across web, mobile, and backend systems. A strong focus on mentoring and security culture is expected.