Senior Information Security Engineer

Stack Exchange

Senior Information Security Engineer at Stack Overflow ensuring security for engineering, business, and customers. Leading security initiatives and building an SecOps program across diverse systems.

Posted 5/20/2026full-timeRemote • 🇺🇸 United StatesSeniorWebsite

Tech Stack

Tools & technologies

CloudDNSSplunk

About the role

Key responsibilities & impact

Lead Contribute to security requirements in designing, developing, and deploying large-scale services and platforms
Conducting security architecture reviews of the application stack, including applications built on cloud and emerging technologies
Design and develop platform-level solutions to promote security-related initiatives and improvements. - Review source code for potential security issues, recommend and implement fixes
Providing specific risk assessment and remediation guidelines for developers and business owners - Belief in automation and tooling as a critical part of the software lifecycle
Document and disseminate security guidelines for common security issues, remediation guidance, and security baselines
Contribute to SOC2 and ISO 27001/27701 audits as needed
Work with developers to provide security guidance
Actively promote improving the security culture and education within the organization
Eager to learn new technologies and solutions
Be curious about how systems work and how they fail, design them to be sustainable in the face of failures

Requirements

What you’ll need

25+ years of experience in web application security, secure application design and architecture, threat modeling, secure coding, and cryptography
Strong desire to secure systems, define and improve processes.
Familiarity with: Containers, Cloud, Servers, Networking, DNS, and PaaS & SaaS
Deep technical understanding of the OWASP Top 10
Experience with Splunk or similar SIEM
Experience with Nexpose or similar vulnerability scanning tools
Experience integrating security tools to work as an ecosystem
Solid experience in threat modeling and identification techniques
Ability to work with developers to resolve security issues
Experience in code reviews, vulnerability detection, and root cause analysis

Benefits

Comp & perks

Competitive Base Salary
Generous paid vacation
Generous parental leave (16 weeks at 100% pay), family care leave, and unlimited sick days
Industry-leading health benefits that are applicable per country of residence for all our full-time employees
Company-paid Life Insurance
Home Internet stipend
Professional allocation for your growth and development
One-time allowance to assist with your home office setup
Company-paid access to Calm, Bravely, LinkedIn Learning, MyAcademy and Overdrive

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

web application securitysecure application designsecurity architecturethreat modelingsecure codingcryptographyvulnerability detectionroot cause analysiscode reviewsrisk assessment

Soft Skills

leadershipcommunicationcuriosityprocess improvementsecurity culture promotioncollaborationeducationautomation beliefproblem-solvingadaptability

Certifications

SOC2ISO 27001ISO 27701