Staff Security Engineer

rtbhouse; United States; Remote; USD 150,000 - 230,000; Full time

Job summary

rtbhouse is seeking a senior security engineer to strengthen security across large-scale distributed systems, infrastructure, and software development practices.

The role spans cross-functional collaboration with engineering, platform, infrastructure, DevOps, cloud, and security operations teams to surface systemic risks, shape technical standards, and embed security into how systems are designed and built.

Qualifications

• Eight or more years of professional experience in security-related roles.
• Hands-on security controls design for production environments at scale.
• Experience with security reviews, threat modeling, or assessments.
• Strong knowledge of app, infra, and network security including authN/authZ.
• Working knowledge of Linux, containers, Kubernetes, networking, and cloud/on‑prem security.
• Programming or scripting in Python, Go, Java, or C++.
• Proficient in Polish and English, minimum B2/C1.

Responsibilities

• Identify systemic security risks across applications, cloud and on‑prem infrastructure.
• Perform security architecture reviews and produce actionable, delivery-friendly recommendations.
• Partner with engineering early in the lifecycle to design mitigations for weaknesses.
• Collaborate with security operations to improve detection and translate findings into controls.
• Build reusable security tools, automation, and services adopted by engineering teams.
• Define and evolve security standards, reference architectures, and engineering guidelines.

Skills

Security engineering

Security architecture

Threat modeling

Linux

Kubernetes

Containers

Python

Go

Java

C++

English

Polish

Tools

Kubernetes

Terraform

PostgreSQL

GitHub Actions

Jenkins

Job description

Role overview

A senior individual-contributor position focused on strengthening security across large-scale distributed systems, infrastructure, and software development practices. The role spans cross-functional collaboration with engineering, platform, infrastructure, DevOps, cloud, and security operations teams to surface systemic risks, shape technical standards, and embed security into how systems are designed and built. It sits as a bridge between operational security and engineering, turning incident and threat insights into durable architectural and process improvements.

Responsibilities

• Identify systemic security risks spanning applications, cloud and on-premises infrastructure, internal platforms, and software development processes.
• Conduct security architecture reviews for existing systems and new designs, producing actionable recommendations without blocking delivery.
• Partner with engineering teams early in the development lifecycle to design practical mitigations for security weaknesses.
• Collaborate with security operations to improve detection, analyze attack patterns, and translate findings into controls, automation, and architectural changes.
• Build reusable security tools, automation, and services that engineering teams can adopt directly.
• Define and evolve technical security standards, reference architectures, engineering guidelines, and best practices.

Requirements

• Eight or more years of professional experience in security engineering, software engineering, infrastructure security, product security, or closely related technical roles.
• Demonstrated hands-on work designing security controls for production environments at scale and in high-throughput distributed systems.
• Practical experience with security architecture reviews, threat modeling, or technical security assessments.
• Strong understanding of application, infrastructure, and network security, including authentication, authorization, and common attack techniques.
• Working knowledge of Linux, containers, Kubernetes, networking, and modern distributed systems, plus securing both cloud and on-premises environments.
• Programming or scripting ability in at least one general-purpose language such as Python, Go, Java, or C++.
• Professional working proficiency in both Polish and English, minimum B2/C1.

Nice to have

• Familiarity with Google Cloud Platform alongside on-prem solutions, Kubernetes serverless patterns, Argo CD and Argo Workflows, PostgreSQL, Terraform and Terragrunt, and CI/CD tooling such as GitHub Actions and Jenkins.

Benefits and work setup

• Highly flexible, fully remote working arrangements based in Poland, with the ability to set your own schedule.
• Engagement with large-scale, high-throughput engineering projects and modern security tooling.
• Direct visibility into business outcomes, with a central role in shaping how security decisions are made across the engineering organization.