Senior Security Engineer
MattermostResponsibilities
- Lead security and IT projects that improve the security posture of company infrastructure.
- Detect, investigate, and remediate incidents using SIEM, EDR, and SOAR tooling.
- Conduct threat hunting across cloud and endpoint environments using a Zero Trust framework.
- Administer company-wide IAM and security monitoring infrastructure.
- Contribute to security policies, incident response, forensics, and endpoint management programs.
- Partner with Engineering to assess and mitigate risks from AI-enabled tools and workflows.
- Explore and implement AI and automation in detection, analysis, and response pipelines.
- Collaborate with staff across North American and international time zones.
Requirements
- A bachelor’s degree in Computer Science or a related field, or significant professional security experience.
- At least 3 years of hands-on experience in security engineering and incident response.
- Experience with SIEM platforms, security monitoring systems, EDR tools such as CrowdStrike or SentinelOne, and SOAR platforms.
- Knowledge of Zero Trust architecture, threat hunting, cloud security controls across AWS, GCP, and/or Azure, Linux, Kubernetes, Docker, IAM, and infrastructure automation.
- Practical experience evaluating the security implications of AI systems and AI-assisted workflows.
- Experience managing the security of Microsoft 365 and Google Workspace tenants.
- Excellent written and verbal communication skills.
- Preferred qualifications include experience with SOC2, ISO 27001, FedRAMP, or Cyber Essentials Plus certification processes.
- Preferred certifications include OSCP, GCIH, GCFA, or equivalent penetration testing or incident-response credentials.
- Experience with Go or Python, open-source communities, or endpoint security management in a fully remote organization is preferred.
Benefits
- Fully remote, globally distributed work with flexible scheduling and no commute.
- Equity and benefits are offered.
- The role works across international time zones and may involve U.S. export-control eligibility requirements.
Categories
About Mattermost
Mattermost is the leading collaboration platform for mission-critical work. We serve national security, government, and critical infrastructure enterprises, from the U.S. Department of Defense, to global tech giants, to utilities, banks and other vital services. We accelerate out-of-band incident response, DevSecOps workflows, mission operations, and self-sovereign collaboration to bolster the focus, adaptability, and resilience of the world’s most important organizations. Our enterprise software and single-tenant SaaS platforms are built to meet the custom needs of rigorous and complex environments while offering a secure and unrivaled collaboration experience across web, desktop, and mobile with channel-based messaging, file sharing, audio calling, and screen share with integrated tooling, workflow automation, and AI assistance.