Senior Security Engineer, Third-Party Risk (Hybrid)

LinkedIn; Mountain View (CA); Hybrid; USD 129,000 - 212,000; Full time

Job summary

LinkedIn in Mountain View is seeking a Senior Security Engineer focused on Enterprise & Third Party Risk Management to strengthen security across SaaS, cloud, and API integrations. You will lead security assessments of third-party technologies, provide architecture guidance, and help scale security patterns.

The role requires hands-on security engineering, strong cross-functional communication, and deep expertise in application and cloud security.

Qualifications

• BA/BS in Computer Science, Cybersecurity, Information Security, or related technical field, or equivalent technical experience.
• 2+ years of experience in security engineering or a related technical security discipline.
• 2+ years of experience with security assessment methodologies such as threat modeling, architecture/design reviews, penetration testing, or vulnerability assessment.
• 2+ years of experience evaluating security architecture for modern applications, SaaS services, cloud infrastructure, APIs, or other complex technology environments.
• 2+ years of experience in one or more areas including application security, cloud security, IAM, infrastructure security, data protection, or software supply-chain security.
• Experience with programming or scripting languages such as Java, Go, or Python.

Responsibilities

• Lead technical security assessments of complex third-party technologies, including SaaS, cloud services, APIs, AI/ML services, developer platforms, and infrastructure providers.
• Provide architectural guidance and security consultation to engineering and non engineering teams throughout the development lifecycle.
• Lead technical security assessments of complex and critical platforms, performing end-to-end evaluations that encompass architecture reviews, threat modeling, and penetration testing.
• Perform architecture reviews and threat modeling to identify trust boundaries, attack paths, data exposure, identity and privilege risks, and other security weaknesses.
• Evaluate security architecture and controls across application and cloud security, IAM, data protection, vulnerability management, secure development, incident response, and software supply chain.
• Analyze technical security evidence, identify material security gaps, and define appropriate remediation or compensating controls with internal teams and technology providers.
• Develop and deploy security tooling, automated workflows, and standardized processes to enhance operational efficacy and expand the organizational influence of the team.
• Provide clear technical risk assessments and recommendations that enable engineering and business stakeholders to make informed decisions about third-party technologies.
• Improve assessment methodologies, technical security requirements, automation, and reusable security patterns to increase the effectiveness and scalability of third-party security reviews.
• Architect and implement automated security tooling utilizing machine learning and GenAI technologies to optimize review processes, elevate vulnerability identification capabilities, and minimize operational overhead, including hands-on software development for security automation.
• Collaborate with engineering, business, and product teams to proactively enhance security posture through scalable self-service resources, documentation, and readiness frameworks.
• Evaluate, deploy and maintain enterprise security tools like DLP, DSPM, SSPM, EDR, etc

Skills

Security engineering

Threat modeling

Security assessments

Communication

Cloud security

Application security

Automation

Education

Bachelor's degree

Tools

DSPM

SSPM

EDR

DLP

Job description

LinkedIn in Mountain View is seeking a Senior Security Engineer focused on Enterprise & Third Party Risk Management to strengthen security across SaaS, cloud, and API integrations. You will lead security assessments of third-party technologies, provide architecture guidance, and help scale security patterns.

The role requires hands-on security engineering, strong cross-functional communication, and deep expertise in application and cloud security.