Security Engineer [IC3]

About the role

As a Security Engineer at Sourcegraph, you will play a role in strengthening the security posture of our products and infrastructure. Your responsibilities will encompass security operations, monitoring, incident response, and application security assessments. By contributing to these areas, you will help safeguard our codebase and ensure the protection of our customers' deployments.

Key facts

What you'll do

• Familiarize yourself with our monitoring and alerting systems while participating in on-call rotations to ensure prompt incident response.
• Identify and address vulnerabilities within our infrastructure by updating libraries and evaluating container security measures.
• Manage internal systems that facilitate alert triaging and collaborate with various teams to resolve security-related inquiries from customers.
• Conduct thorough application security audits, implement security best practices, and respond to incidents as they occur.
• Work closely with your manager to create a personalized career development plan that outlines clear objectives.
• Investigate emerging attack vectors and perform threat modeling for both current and future applications.
• Evaluate and integrate new tools to improve operational efficiency while ensuring compliance with standards such as SOC 2, ISO 27001, and GDPR.
• Collaborate with cross-functional teams to ensure security is embedded throughout the development lifecycle.

Requirements

• Proven experience in reviewing SIEM alerts and participating in on-call rotations effectively.
• Solid background in securing SaaS applications, encompassing infrastructure security, application security, and compliance aspects.
• Proficiency in Go, including the ability to write and maintain internal tools and conduct thorough code reviews.
• Familiarity with the Elastic stack and Google Cloud Platform (GCP) is essential.
• Experience in utilizing and automating various defensive security tools to enhance security measures.
• Strong collaborative skills to work effectively with engineering teams on securing projects.
• Excellent written communication skills for creating clear and concise documentation.

Nice to have

• Previous experience in software development, including coding and contributing to applications.
• Familiarity with the dynamics of startup environments.
• Knowledge of TypeScript and Terraform would be advantageous.
• Experience with Kubernetes and its security implications.
• Background in securing AI products is a plus.

Skills & tools

• Go programming language
• Elastic stack
• Google Cloud Platform (GCP)
• Defensive security tools

Practical notes

This position is open to candidates from around the globe, with a preference for those based in Europe. Applicants should be available to work during hours that overlap with Eastern Standard Time for at least 10 hours per week.

Compensation

We offer competitive salaries that exceed the market average to attract exceptional talent. Your base salary will be aligned with the IC3 pay band corresponding to your specific location zone. The starting salaries for the IC3 pay band are as follows:

• Zone 2: $144,000 USD
• Zone 3: $108,000 USD
• Zone 4: $72,000 USD

In addition to the base salary, we provide meaningful equity and a comprehensive benefits package to support our employees.

Interview process

The interview process is designed to be efficient, typically taking less than five hours and consisting of multiple stages:

👋 Introduction Stage

• 20-minute Recruiter Screen
• 45-minute Hiring Manager Screen / Resume Deep Dive

🧑💻 Team Interview Stage

• 60-minute Technical Interview: General
• 60-minute Technical Interview: Complex Problem Deep Dive
• 45-minute Cross-functional Team Collaboration / Values

🎉 Final Interview Stage

• 15-minute Leadership Discussion
• Reference checks and background verification

Candidates are encouraged to request additional conversations with team members if they wish to gain further insights.

Learn more about us

To discover more about working at Sourcegraph, we invite you to explore our handbook. Our team is committed to building a significant company, and you can read about our culture, competitive compensation, and benefits on our website.

Sourcegraph is an equal opportunity employer and actively seeks candidates from diverse backgrounds to join our team.