Senior Software Security Engineer: Identity & Threat Modeling

Linktree; Los Angeles (CA); Hybrid; USD 200,000 - 215,000; Full time

Benefits offered by this job

Wellbeing allowance

Medical, dental, vision coverage

Retirement contributions

Generous PTO

Employee stock options

Job summary

Linktree is seeking a Senior Software Engineer for our security team. You’ll design and ship authentication, authorization, and secrets management, using TypeScript, Node.js, React, GraphQL, PostgreSQL/MySQL and AWS to harden systems against threats.

You’ll collaborate with Engineering, Product, and Trust & Safety to balance security with creator experience, while mentoring others and evolving internal tooling for secure by default development.

Qualifications

• 4+ years of professional software engineering experience with security focus
• Strong full-stack skills across core stack: TS, Node.js, React, GraphQL, PostgreSQL or MySQL and AWS
• Experience threat modelling a real system and turning output into shipped work

Responsibilities

• Design and ship security improvements across the Linktree product: authentication and authorisation, session and token handling, secrets management and third-party access
• Build detection and response capability for product surface: abuse, account takeover, scraping and fraud
• Threat model new and existing systems with squads and turn outputs into prioritised, shipped work
• Own internal tooling and paved paths to help engineers build securely by default
• Triage and remediate vulnerabilities from internal findings, bug bounty and pen tests
• Partner with Engineering, Product and Trust & Safety on where to harden and where a control costs more in creator friction
• Bring AI into how you build to move faster on reviews, migrations and investigation
• Raise security bar through review, pairing, documentation and mentoring

Skills

TypeScript

Node.js

React

GraphQL

AWS

Security

Threat modelling

AI-assisted development

Tools

PostgreSQL

MySQL

Job description

Linktree is seeking a Senior Software Engineer for our security team. You’ll design and ship authentication, authorization, and secrets management, using TypeScript, Node.js, React, GraphQL, PostgreSQL/MySQL and AWS to harden systems against threats.

You’ll collaborate with Engineering, Product, and Trust & Safety to balance security with creator experience, while mentoring others and evolving internal tooling for secure by default development.