Security Engineer

Join our team as a Security Engineer, where you will support and improve our vulnerability management program, participate in incident response activities, and contribute to application security initiatives. You will also help configure and improve security tooling, collaborate with various teams to embed security thinking into workflows, and stay current with the evolving threat landscape. Enjoy flexible work options, team-wide time off, volunteer opportunities, wellness support, and career growth opportunities.

Responsibilities

• Support and continuously improve the vulnerability management program, including defining processes for identifying, prioritizing, tracking, and driving remediation of security findings.
• Participate in incident response activities, including triage, investigation, containment, and post-incident documentation.
• Support application security initiatives, including automated code scanning, dependency analysis, and working with engineering teams to address security findings early in the development process.
• A collaborative approach to problem-solving — you ask questions, share what you learn, and support your teammates
• Comfort working with some degree of autonomy on assigned tasks and projects, while knowing when to ask for input

Requirements

• Familiarity with AI tools and how they can be applied in a security context — whether for automating workflows, triaging alerts, or improving detection and response. Experience working with AI models or building AI-assisted workflows is a plus
• The ability to communicate clearly in writing and in conversation — our team is globally distributed and works primarily in English (professional working proficiency is sufficient; native fluency is not required)
• Hands-on experience in at least one security domain, such as vulnerability management, incident response, application security, endpoint security, or identity and access management
• Familiarity with the NIST Cybersecurity Framework or similar security frameworks
• Experience with cloud environments (AWS or GCP) or container security

Preferred

• Experience working with security tooling (e.g., vulnerability scanners, endpoint detection and response platforms, SIEM systems, or similar); familiarity with specific tools is a plus, but willingness to learn our stack matters more than exact tool experience
• A solid understanding of cybersecurity fundamentals — including networking, operating systems (Linux, macOS, or Windows), and cloud environments — gained through any combination of formal education, self-study, bootcamps, or professional experience
• Exposure to security automation or scripting (e.g., Python, workflow automation tools)
• Experience working in a regulated environment (e.g., SOC 2, PCI)