Staff+ Security Engineer, Risk Engineering

Overview

Staff+ Security Engineer on the Security Risk team, rebuilding security risk management as an engineering function with automation and AI-native platforms.

What you'll do

• Own complex security risk problems end to end with minimal oversight.
• Turn ambiguous signals into defensible severity and likelihood views and drive escalation, treatment, and remediation.
• Build risk tooling to make risk measurable, including quantification, automated intake/triage, and observability.
• Partner with Security Engineering as a technical peer to pressure test architectures and treatment plans.
• Mentor engineers and risk practitioners and help build a risk engineering culture.
• Assess risks across areas such as identity and secrets management, developer security and supply chain, infrastructure security, and secure frameworks.

What you'll need

• At least 8 years of software engineering or security engineering experience, including leading and remediating complex security risks independently.
• Bachelor’s degree in a related field or equivalent experience.
• Strong programming skills in Python or a systems language such as Go, Rust, or C/C++.
• Broad knowledge across core security engineering domains, with depth in at least one.
• Calibrated risk judgment for defensible severity/likelihood and updating when evidence changes.
• Experience leading cross-functional security initiatives and navigating complex organizational dynamics.

Details

• Location-based hybrid policy: expect all staff in one of the offices at least 25% of the time.
• Visa sponsorship: sponsors visas for some roles/candidates with reasonable efforts if offered.