Senior/Staff Engineer

Responsibilities

• Build secure-by-default practices, defense in depth, and security guardrails into frameworks, architecture, processes, and the software development lifecycle.
• Develop security requirements and work with teams to integrate them into applications and services.
• Perform hands-on source-code review, security risk assessments, penetration testing, and threat modeling.
• Design and implement solutions to resolve or mitigate vulnerabilities and security risks.
• Drive the product security roadmap with product, engineering, and the broader security team.
• Research relevant threats and attack methods and convert findings into secure-coding education for engineers.
• Partner with product, engineering, DevOps, and services teams to ship secure software efficiently.

Requirements

• 6+ years of experience in application or product security.
• Strong coding ability sufficient to automate work and build frameworks or services that solve security problems.
• Hands-on experience with microservice architectures.
• Deep familiarity with a codebase and practical security work beyond reviewing SAST, DAST, and SBOM tooling output.
• Ability to prioritize based on real risk rather than raw vulnerability counts.
• Ability to collaborate effectively with security, engineering, product management, and service teams.

Benefits

• Comprehensive medical, dental, vision, life, and disability coverage.
• No-cost access to therapy through the Grow platform for US employees.
• Retirement savings programs and equity opportunities.
• Flexible time off, company-paid holidays, and a company-wide winter break.
• Up to 18 weeks of paid parental leave and a new-child stipend.
• Dedicated weekly flexible time for mental health and self-care.
• Annual wellness and professional-development stipend.
• Pre-tax commuter benefits for hub-based employees.
• Home-office support and meal benefits for remote and hub-based employees.
• Additional wellbeing benefits including wellness memberships, virtual care, pet-insurance discounts where available, and global travel assistance.
• Hybrid work is available three days per week on Tuesday, Wednesday, and Thursday from the New York City, San Francisco, or Seattle hubs, or the role may be fully remote.
• Both work arrangements include travel two to three times per year, such as company and department offsites.