Security Engineer [IC3]

Stack

Responsibilities

• ▹Operate alerting and monitoring stack, participate in on-call rotation
• ▹Discover and fix infrastructure vulnerabilities (libraries, base images, containers)
• ▹Maintain internal alert-triage automations
• ▹Improve application security via audits, best practices, code fixes
• ▹Perform reactive incident response
• ▹Threat model existing and future applications
• ▹Help maintain SOC 2, ISO 27001 and GDPR compliance

Requirements

• ▹Practical experience reviewing SIEM alerts and on-call rotations
• ▹Generalist SaaS security (infrastructure, application, compliance)
• ▹Go experience, writing/maintaining internal tooling, code reviews
• ▹Experience with Elastic stack and GCP
• ▹Using and automating defensive security tools
• ▹Effective written communication and documentation

Nice to have

• ▹Software development experience (writing code, contributing to applications)
• ▹Startup environment experience
• ▹TypeScript and Terraform knowledge
• ▹Kubernetes experience
• ▹Experience securing AI products

Soft skills

What we offer

• ▹Above-average pay, zone-based bands (Zone 2 from $144,000, Zone 3 from $108,000, Zone 4 from $72,000)
• ▹Equity and benefits package

About the company

Sourcegraph's security team builds a world-class security system trusted by some of the biggest tech companies.