Staff Security Engineer

Job not on LinkedIn

🕒 2 days ago

🍂 Massachusetts – Remote

🍂 Massachusetts – Remote

💵 $185k - $230k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Flock Safety

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 2017

🔐 Security

💰 $150M Series E on 2022-02

Security • Public Safety • Technology

Flock Safety is a company that focuses on providing advanced technological solutions for public and private safety. They utilize tools such as license plate recognition (LPR), video cameras, audio detection, and automated drones to enhance security for neighborhoods, businesses, schools, and governmental organizations. Their products are designed to deter crime and assist law enforcement in generating leads through evidence collection. Flock Safety operates on a subscription service model, offering maintenance-free, easy-to-deploy infrastructure to improve community safety. Trusted by over 5,000 communities, Flock Safety aims to create safer environments while maintaining transparency and privacy.

📋 Description

• Own the operational model and execution of Flock's Product Security Incident Response Team (PSIRT) across every externally reported and internally discovered product vulnerability. • Serve as the operational lead for our CVE Numbering Authority (CNA), managing vulnerability intake, triage SLAs, severity rubrics, and public CVE record publishing. • Drive cross-functional remediation efforts across Hardware, Firmware, Device SRE, Cloud SRE, Mobile, Legal, Communications, and Support to ensure timely patch delivery. • Author clear, accurate public security advisories, internal postmortems, and executive summaries tailored to technical, legal, and leadership audiences. • Establish metrics and operational reporting for PSIRT performance, tracking time-to-triage, time-to-fix, and time-to-disclose.

🎯 Requirements

• Demonstrated experience leading or running a PSIRT, product security, or coordinated vulnerability disclosure function, ideally within connected hardware or IoT environments. • Deep operational experience acting as a CVE Numbering Authority (CNA) or implementing the FIRST PSIRT Services Framework across discovery, triage, remediation, and disclosure. • Hands-on technical background in product security across embedded or firmware security, Linux or Android device security, AWS cloud security, or mobile application security. • Expertise applying CVSS, CWE, EPSS, and SSVC frameworks to evaluate risk and assign accurate vulnerability severities. • Strong written communication skills with the capability to translate complex technical vulnerabilities into clear advisories for customers, engineers, and executives.

🏖️ Benefits

• Flock Stock Options