Security Engineer [IC3]
SourcegraphBase Salary
$72k - $144k/yr
Responsibilities
- Maintain and improve the monitoring and alerting stack and participate in security on-call rotations.
- Review SIEM alerts, triage security events, and perform reactive incident response.
- Discover, fix, and mitigate infrastructure vulnerabilities in libraries, base images, and containers.
- Maintain internal security automation systems for alert triage and operational efficiency.
- Conduct application security audits, reviews, code fixes, threat modeling, and security education.
- Perform proactive security research, identify attack vectors, and support bug bounty programs.
- Provide security reviews and guidance for application, infrastructure, cloud, and customer on-premise deployments.
- Help maintain compliance with SOC 2, ISO 27001, and GDPR standards.
- Collaborate with engineering teams to secure projects and address customer security concerns.
Requirements
- Practical experience reviewing SIEM alerts and participating in on-call rotations.
- Practical experience securing SaaS applications as a security generalist across infrastructure security, application security, and/or compliance.
- Experience with Go, including writing and maintaining internal tooling and conducting code reviews.
- Experience with Elastic Stack and GCP.
- Experience using and automating a wide range of defensive security tools.
- Experience collaborating across engineering teams to secure projects.
- Strong written communication and documentation skills.
- Preferred: software development experience, startup experience, TypeScript and Terraform experience, Kubernetes experience, and experience securing AI products.
Benefits
- Globally distributed work with a preference for candidates in Europe; working hours must overlap with EST for at least 10 hours per week.
- Meaningful equity and generous perks and benefits.
- Interview process expected to take less than five hours, with remote conversations and technical interviews.
Categories
About Sourcegraph
Sourcegraph is the leading code intelligence platform revolutionizing how developers understand, fix, and automate their code. At Sourcegraph, we use the power of AI with Cody, our AI coding assistant, to help developers better understand their code. Our technology makes it easy to navigate through large codebases, find relevant code snippets, and get historical context. Plus, our Code Search and analysis tools help you quickly fix bugs, refactor code, and improve performance - all in one easy-to-use interface. Over one million engineers use Sourcegraph to improve code security, efficiently onboard developers, promote code reuse, resolve incidents, and boost code health. Code intelligence is a critical capability that increases enterprise engineering velocity, software quality and stability, and team health. Leading companies like Databricks, Plaid, Uber, Lyft, Reddit, GE, and Dropbox, rely on Sourcegraph to build the products we all rely on. Sourcegraph is an all-remote company backed by Andreessen Horowitz, Sequoia Capital, Craft Ventures, Redpoint Ventures, and Goldcrest Capital.