Senior Security Software Engineer

Job Summary

As Pipedream's first dedicated Security Engineer, the full-time remote Senior Security Software Engineer will own end-to-end platform security tooling, process, threat modeling, and audits while actively identifying and fixing vulnerabilities in a polyglot codebase.

Key responsibilities

• Finding and patching vulnerabilities directly in code and dependencies across various programming languages
• Building and maintaining the platform's threat model while collaborating with Product and Engineering teams to ensure secure feature deployment
• Leading incident response for critical security issues and managing compliance work such as SOC 2 and HIPAA audits

Required qualifications

• 7+ years of experience in product security, application security, or software engineering with a security focus
• Hands-on experience with vulnerability management, threat modeling, and risk analysis
• Proficiency in securing AWS or comparable cloud platforms at production scale
• Solid understanding of application security, including risk identification and mitigation in application design and code
• Experience with compliance frameworks such as SOC 2 or HIPAA, including running audits end-to-end