Security Engineer, Platform

Role overview A developer-focused email platform used by over four million developers is hiring its first dedicated security engineer for the Platform Squad. The squad owns the internal platform and reliability foundations that let engineering teams build, deploy, observe, and operate services safely. This is a remote role across Americas and European time zones with occasional travel for offsites and conferences, and the hire will work as a hands-on individual contributor shaping security foundations.

Responsibilities - Build and improve platform security foundations, including API keys, service permissions, secrets management, tenant isolation, audit logs, and internal access controls. - Design secure defaults for new services, workers, queues, databases, internal tools, and deployment pipelines. - Improve detection and response for suspicious access, leaked credentials, abnormal sending behavior, privilege changes, and sensitive system events. - Review and update processes and pipelines so security is built in rather than bolted on. - Raise the overall security bar across engineering.

Requirements - Experience securing production infrastructure, cloud environments, APIs, developer platforms, or multi-tenant SaaS products. - Ability to write code and comfortable reading application, infrastructure, and deployment code. - Understanding of authentication, authorization, secrets, IAM, logging, audit trails, incident response, and secure deployment pipelines. - Comfort working independently as the first dedicated security hire, prioritizing day-to-day work without heavy process. - Low-ego, direct communication style, curiosity, and care for developer experience.

Nice to have - Experience with AWS, Terraform, Kubernetes, Cloudflare, or similar infrastructure tools. - Background in open source security, GitHub organization hardening, package publishing, dependency review, or supply-chain security. - Helping a company prepare for SOC 2, ISO 27001, GDPR, or enterprise security reviews without slowing engineering. - Building security observability, alerting, detection pipelines, or incident response workflows. - Working with trust and safety, anti-abuse, fraud, or platform integrity teams. - Designing security systems for high-scale developer products.

Benefits and work setup - 100% remote team with flexible working schedules and autonomy to ship. - Low-ego, ownership-oriented culture. - Compensation: $140,000 - $160,000 USD, commensurate with experience.