Security Engineer

• Develop and execute hypothesis-driven hunts using EDR, SIEM, and network traffic analysis to find threats bypassing existing defenses
• Lead complex investigations and CSIRT activities, providing technical expertise during containment, eradication, and post-incident analysis
• Analyze adversary Tactics, Techniques, and Procedures (TTPs) and integrate intelligence feeds to drive targeted hunting scenarios
• Collaborate with security engineering to convert hunting discoveries into permanent actionable alerts, reducing future risk
• Mentor junior analysts, define the technical standards for hunting workflows, and report findings to stakeholders

Senior Security Manager

• Review and help design robust security standards and monitoring
• Maintain and improve our policy-as-code platform to enable rapid detection and response
• Work closely with our Infrastructure team to ensure cloud-based deployments have proper monitoring and adhere to our policies
• Manage SOC II audits, set a high standard for compliant software and processes, and ensure we consistently meet those standards
• Participate in on-call rotation to support critical security issues
• Own the vulnerability disclosure program and triage inbound reports to security@
• Run periodic tabletop exercises and incident response drills
• Maintain security policies and lead recurring reviews (e.g., firewall changes, security reviews)
• Lead responses to partner and customer security questionnaires
• Maintain the security risk register, track remediation, and produce periodic security metrics for leadership

Lead Security Engineer

• Contribute to our application security program. Work with our SAST, DAST, and SCA tooling, triage and prioritize vulnerabilities, and partner with engineering teams to drive remediation. Participate in threat modeling and secure design reviews on new products and services.
• Share incident response on-call. Investigate, contain, and resolve security incidents alongside the rest of the team. Help refine our runbooks, detection coverage, and post-incident process.
• Help harden our cloud and Kubernetes environment. Contribute to security posture across GCP and GKE: IAM and least-privilege, secrets management, container and supply chain security, and IaC guardrails (Terraform).
• Build detections and security automation. Engineer high-signal detections from cloud, identity, and application telemetry. Automate the toil of vuln triage, access reviews, SaaS posture, questionnaire workflows so the team scales.
• Streamline customer security work. Help respond to customer security questionnaires and audits, and build internal tooling and a knowledge base so this scales as deal volume grows.
• Strengthen business continuity and DR. Help assess threats to continuity, contribute to DR plans, and run real exercises against them.
• Help drive a security culture across engineering. Pair on developer training, secure-coding guidance, and standards work to make the secure path the easy path.

Senior Security Engineer

• Set the security agenda for the platform.
• Hold the line between security and developer experience.
• Lead our security strategy for AI agents.
• Own our security product surface.
• Define the unified access model across Supabase.
• Drive the compliance roadmap.
• Be the customer's voice for security.
• Ship the docs that go with the code.

Product Manager – Security & Trust

• You'll own Hightouch's application security posture end-to-end.
• Shape what security looks like here as we scale from 70 to 140+ engineers.
• Solve hard problems at the intersection of security and distributed systems.
• Improve our rate limiting, abuse detection, and granularity of access control.
• Support our multi-region and multi-cloud backend, including launching Hightouch in new regions to support data residency requirements.

See all jobs on JobTailor

Senior Security Manager

Lead Security Engineer

Senior Security Engineer

Product Manager – Security & Trust

Application Security Lead