What you’ll do
- Audit RLS, role escalation, and webhook signature flows on every PR.
- Run the disclosure and bug-bounty programs end-to-end.
- Own annual SOC 2 + ISO audits with our external partners.
Back to all roles
Security · Hybrid
Security engineer
Be the final reviewer on every migration, the on-call for every disclosure, and the engineer who keeps SOC 2 + ISO certifications alive.
What you’ll bring
- 5+ years application security experience in production SaaS.
- Postgres + RLS depth; comfortable reading our migrations critically.
- Track record running coordinated disclosure programs.
Nice to have
- Stripe + payment compliance background.
- Experience writing cryptographic primitives in production.
- Open-source security tooling contributions.
How to apply
Email a short note about why this role fits and links to work you’re proud of. We reply within five business days.