Stripe1 день назад
Security Engineer, Privy
Зарплата не указана
NYC-Privy
Обязанности
- 01Own security engineering work end to end: investigate alerts, findings, anomalies, and security requests; identify root causes; drive remediation; and clearly document outcomes
- 02Participate in Privy’s security on-call rotation, helping respond to incidents, triage alerts, support vulnerability workflows, complete access reviews, and handle security escalations
- 03Build and maintain production-quality tooling that reduces manual work, including alert enrichment, automated triage and routing, remediation workflows, access-review automation, and detection improvements
- 04Lead focused investigations into suspected security events or compromises, gathering evidence methodically and coordinating the appropriate response
- 05Proactively identify recurring sources of operational toil and engineer durable solutions that improve the team’s speed, consistency, and ability to scale
- 06Partner with product and engineering teams to assess security risks, review lower-complexity designs and implementation plans, and make practical security tradeoffs to deliver quickly with quality and soundness
- 07Contribute across Privy’s application, infrastructure, cloud, and product-security surface area, developing broad context while building deeper expertise over time
Требования
- 01Experience as a security engineer, detection engineer, or similarly hands-on engineer in a technically demanding environment
- 02Strong software-engineering skills in Python, Go, Ruby, or a similar language
- 03You can build maintainable tooling and contribute directly to production fixes, not only one-off scripts
- 04Experience investigating security signals, incidents, vulnerabilities, suspicious activity, or other ambiguous technical problems through to resolution
- 05Familiarity with security operations, incident response, vulnerability management, detection engineering, access reviews, or related operational-security workflows
- 06A strong understanding of web, browser, infrastructure, or cloud security, with the ability to apply that understanding across a broad range of problems
- 07Good judgment under pressure, a methodical approach to investigation, and comfort working independently with agency despite incomplete information
- 08Strong communication and collaboration skills, including the ability to explain technical findings, risks, and recommended actions clearly to clients and internal stakeholders alike
- 09A self-directed approach to work: you notice gaps, make progress through ambiguity, and reliably close the loop