Staff TPS Security Engineer: Third-Party Risk & Automation

California (MO)

Hybrid

USD 156,000 - 255,000

Full time

14 days+

Application generator

Stand out for this role — generate a tailored resume and cover letter in about a minute.

Get past ATS filters

Job summary

LinkedIn is seeking a Staff Security Engineer focused on Third-Party Technology Security (TPS) to strengthen our security posture by mitigating risks from vendors, SaaS, and AI tools. You will lead security engineering initiatives, automate GRC workflows with Python and agentic tooling, and collaborate with Legal, Procurement, and other teams to design scalable controls.

The role is hybrid in Mountain View, CA, requires 5+ years in security reviews and programming, and offers a pay range of

Qualifications

BA/BS degree in Computer Science, Cybersecurity, Information Security, or related field, or equivalent technical experience
5+ years leading technical security reviews and risk assessments for third-party technologies, SaaS platforms, cloud services, APIs, enterprise applications, or vendor integrations
5+ years of security engineering with in-depth knowledge in areas such as application security, cloud security, security architecture, IAM, infrastructure security, or software supply-chain security
5+ years of experience with threat modeling, security architecture or security design reviews
Experience with programming languages such as Java, GO, or Python and building automation or tooling to improve security engineering workflows
Experience with industry-based information security and controls frameworks like NIST, PCI DSS, SOC 2, and ISO 27001

Responsibilities

Establish a foundational TPS assessment framework to automate security requirements
Lead and mature the TPS including design, implementation, and process improvement
Architect AI-driven automation to accelerate vendor onboarding and provide granular risk metrics across LI
Build automation to replace manual GRC tasks using Python or agentic coding tools
Design and operate workflow orchestration across systems like ticketing, GRC platforms, vendor management tools
Translate ambiguous business requirements into practical, scalable security solutions
Identify opportunities to automate manual processes within the program
Drive program operational excellence with repeatable processes, metrics, and reporting
Manage complex escalations and design roadmaps for high-risk vendors
Act as lead incident commander within LinkedIn for third-party data security breach events
Partner with InfoSec teams for holistic reviews and blueprints for common risk scenarios
Conduct threat modeling on high-risk integrations with Security SMEs
Act as trusted advisor on third-party risk management for stakeholders
Provide foundational technical leadership and mentorship to security engineers