Resend, used by over 2 million developers, hires a Security Engineer for its Platform Squad, which owns the internal platform and reliability foundations that let Resend teams build, deploy, observe, and operate services safely. This is the first dedicated security hire. Fully remote in Americas or European time zones, with some expected travel. Comp: $120,000 - $140,000 USD, commensurate with experience.
Responsibilities
- ▹Build and improve the security foundations of Resend's platform, including API keys, service permissions, secrets management, tenant isolation, audit logs, and internal access controls
- ▹Help design secure defaults for new services, workers, queues, databases, internal tools, and deployment pipelines
- ▹Improve detection and response for suspicious access, leaked credentials, abnormal sending behavior, privilege changes, and sensitive system events
- ▹Review and update processes/pipelines so that security is built-in, not bolt-on
- ▹Raise the security bar
Requirements
- ▹Experience securing production infrastructure, cloud environments, APIs, developer platforms, or multi-tenant SaaS products
- ▹Ability to write code and comfort reading application, infrastructure, and deployment code
- ▹Understanding of authentication, authorization, secrets, IAM, logging, audit trails, incident response, and secure deployment pipelines
- ▹Ability to independently prioritize and drive day-to-day work as the first dedicated security hire
- ▹Prefer practical improvements over heavy processes
Nice to have
- ▹Experience with email infrastructure, transactional email, sender reputation, domain verification, SPF, DKIM, DMARC, webhooks, or abuse prevention
- ▹Have secured cloud infrastructure using tools like AWS, Terraform, Kubernetes, Cloudflare, or similar
- ▹Experience with open source security, GitHub organization hardening, package publishing, dependency review, or supply-chain security
- ▹Have helped a company prepare for SOC 2, ISO 27001, GDPR, enterprise security reviews, or customer trust processes
- ▹Have built security observability, alerting, detection pipelines, or incident response workflows
- ▹Have worked closely with Trust & Safety, anti-abuse, fraud, or platform integrity teams
- ▹Experience designing security systems for high-scale developer products
Soft skills
Low-ego, direct, curious, and willing to learn from othersCares about developer experience and believes security should be easy to adoptSelf-directed and able to prioritize independently
What we offer
- ▹Comp: $120,000 - $140,000 USD, commensurate with experience
- ▹100% remote team with flexible working schedules
- ▹Modern tech stack (Next.js, Raycast, Notion, etc.)
- ▹Autonomy to just ship it; ownership of problems and solutions