Software Engineer (Information Security)

TL;DR

Software Engineer (Information Security): Designing and implementing security controls for a cloud-native database platform with an accent on proactive red teaming, threat modeling, and security automation. Focus on protecting high-load distributed systems, ensuring compliance with SOC 2 and PCI DSS, and building scalable security tooling.

Location: San Francisco Bay Area or Remote (US)

Salary: $140,000 - $320,000 USD

Company

A high-growth, profitable company reinventing the database space by offering PostgreSQL and Vitess clusters.

What you will do

• Design and implement security controls for a cloud-native database platform protecting millions of queries per second.
• Collaborate with engineering teams to conduct security reviews, threat modeling, and provide secure coding guidance.
• Perform proactive red teaming and penetration testing to identify and patch platform vulnerabilities.
• Evaluate, procure, and implement proactive security tools and technologies.
• Ensure adherence to security frameworks including SOC 2 and PCI DSS in collaboration with the compliance team.
• Build security automation and lead incident response and post-incident reviews.

Requirements

• 5+ years of software engineering experience with a focus on security or application security.
• Strong proficiency in Go, with experience in Python, Java, or C++.
• Experience securing cloud-native applications and infrastructure (AWS, GCP, Azure).
• Knowledge of database security, encryption, and access controls.
• Experience with security frameworks and compliance requirements (SOC 2, PCI DSS).
• Understanding of threat modeling, security architecture, and secure coding practices.

Nice to have

• Experience with database internals, distributed systems security, or infrastructure security.
• Expertise in Kubernetes, container security, and cloud security posture management.
• Knowledge of security monitoring, incident response, and vulnerability management.
• Relevant security certifications such as CISSP, CISM, or CEH.

Culture & Benefits

• Work in a high-growth environment focusing on small teams of "p99" individuals.
• Commitment to a diverse, equitable, and inclusive workplace.
• Flexible work philosophy supporting employees to thrive regardless of location.
• Total compensation package including base salary, variable comp, and equity.