Security Engineer

Join Patreon as a Security Engineer, where you'll be a key member of our Security team. Your role will involve contributing to security projects, responding to security investigations, and addressing vulnerabilities. You'll work on application security, infrastructure security, and internal/corporate security, balancing security risks with business needs. You'll also be part of an on-call rotation, write code to support security work, and collaborate with various teams across the organization.

Responsibilities

• Contribuer à des projets de sécurité et répondre aux enquêtes sur la sécurité, aux vulnérabilités ou aux questions.
• Écrire du code pour soutenir le travail de sécurité et améliorer la sécurité de la plateforme Patreon.
• Participer à une rotation d'astreinte et aider à répondre aux incidents et aux enquêtes de sécurité.
• You have experience using AI tools (LLMs, ML models, etc) to identify and address security issues (software vulnerabilities, detection and response, etc.)
• You’re energized by fast iteration: shipping MVPs, testing hypotheses, and evolving products based on what creators and fans respond to

Requirements

• Bachelor’s or Master’s degree in Computer Science, Computer Engineering, or a related field, or the equivalent
• You believe in Patreon’s mission: giving creators control over their work and building communities that feel good to be in
• You have deeper knowledge (three or more years) in at least one security or security-adjacent domain (infrastructure security, application security, cloud security, corporate/IT security, cryptography, privacy, etc.)
• You can develop software (Python, Rust, Golang, or a similar language). You have experience working in a modern software development environment (git, CI/CD, LLM coding tools, etc.)
• You take pride in creating elegant solutions to messy, real-world problems and balancing pragmatic trade-offs between security risks and business needs
• You have two or more years of experience reducing security risks in the application, infrastructure, or corporate security spaces. You can create a threat model and to explain why a given risk matters and what we might do to reduce it
• If you’re excited about a role but your past experience doesn’t match with every bullet point outlined above, we strongly encourage you to apply anyway

Past contributions to large scale, production code bases

• Experience responding to security incidents, investigating incident impact, and building out incident mitigations
• Experience working on large scale Internet platforms that allow users to upload content

Pay

USD 170,000 - 255,500