3 months ago
Remote, WorldwideSenior
Responsibilities
- Identify and close gaps in application security, secure design review, and vulnerability management.
- Conduct threat modeling, secure design reviews, and code reviews while providing practical remediation paths.
- Partner with engineering teams and technical leadership to shape a modern, product-focused security program.
- Improve security posture through scalable tooling, automation, secure defaults, and developer-friendly guardrails.
- Support security incident response by triaging, investigating, and coordinating remediation for product and platform issues.
- Participate in security on-call rotations and respond to urgent security events.
- Manage and mature bug bounty and vulnerability disclosure processes, including triage, validation, prioritization, and engineering coordination.
- Prioritize security efforts by distinguishing theoretical risk from material business risk.
Requirements
- Strong experience in product security, application security, or security engineering.
- Experience with or comfort around cloud-native, developer tools, SaaS, platform, or infrastructure products.
- Deep understanding of application security fundamentals, including authentication, session management, APIs, and secrets handling.
- Experience with vulnerability triage, bug bounty programs, responsible disclosure, or security incident response.
- Ability to participate in a potential security on-call rotation and balance urgency, risk, and practical remediation.
- Experience with or interest in Postgres, Kubernetes, or building enabling security guardrails.
- Clear written communication across technical and non-technical audiences in an asynchronous environment.
- Ability to solve practical developer problems and navigate ambiguity in a fast-moving environment.
Benefits
- Fully remote work with global hiring and a WeWork membership or coworking allowance.
- Employee ESOP equity ownership.
- Technology allowance for equipment and work setup.
- Health insurance covered at 100% for employees and 80% for dependents.
- Annual company off-site.
- Flexible asynchronous work environment.
- Annual professional development and education allowance.
Tech Stack
Categories
About Supabase
Build in a weekend. Scale to millions. Supabase is the Postgres development platform. Start your project with a Postgres Database, Authentication, instant APIs, and realtime subscriptions.