Senior Security Engineer, Vulnerability Management

Job not on LinkedIn

🔥 6 hours ago

🌐 United States, Canada – Remote

🇺🇸 United States – Remote 🇨🇦 Canada – Remote

💵 $153k - $214k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

1Password

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 2009

🔒 Cybersecurity

☁️ SaaS

⚡ Productivity

💰 $620M Series C on 2022-01

Cybersecurity • SaaS • Productivity

1Password is a leading password management and cybersecurity company that offers solutions for both individual and business customers to securely store and manage passwords, secrets, and sensitive information. With features like extended access management (XAM), 1Password empowers users to manage access to every application and web account, ensuring security across all devices with alerts for possible breaches. Trusted by over 150,000 businesses, 1Password provides comprehensive security solutions that enhance productivity by enabling easy and secure sharing of credentials and managing permissions, while maintaining high visibility and control. Their services cater to enterprises and families, providing protection from bad actors in today's SaaS-centric hybrid work environment.

📋 Description

• Lead end-to-end response to product security incidents, from discovery, triage, remediation, and disclosure • Own and evolve 1Password's PSIRT function, including incident classification frameworks, severity models, escalation paths, and response playbooks • Drive coordinated vulnerability disclosure processes and manage responsible disclosure timelines and communications with external security researchers • Coordinate Product Security, Engineering, Legal, Communications, and Customer Success during active security incidents • Lead post-incident reviews and translate findings into systemic improvements across products, processes, and detection capabilities • Develop and maintain incident response tooling, automation, and reporting to reduce time-to-detect and time-to-respond • Contribute to customer-facing security advisories, CVE disclosures, and public incident communications • Evaluate and integrate AI-powered tooling and workflows for incident detection and response • Mentor other engineers and shape the maturity of product security and incident response capabilities • Serve on an on-call rotation with out-of-business-hours coverage • Build Incident Response tooling with AI and demonstrate measurable impact from systems and automation work

🎯 Requirements

• 5+ years of career experience in IT or Engineering with a security focus • Hands-on experience leading or participating in security incident response, ideally in a product or SaaS company context • Experience with coordinated vulnerability disclosure (CVD) and managing relationships with external security researchers • Strong judgment under pressure during time-sensitive situations with incomplete information • Experience building or formalizing incident response capabilities, including playbooks, runbooks, severity frameworks, and escalation processes • Experience drafting or contributing to customer security advisories, CVEs, or public-facing incident communications • Strong communication skills across engineers, executives, and customers • Ability to read and write code for forensic analysis, automation, and tooling • Adaptability and resilience in fast-paced environments with shifting priorities • Experience leveraging AI/ML to accelerate security workflows, automate repetitive tasks, or improve detection and response • Familiarity with CVSS, EPSS, and vulnerability severity frameworks • Familiarity with Software Bill of Materials (SBOMs) and supply chain risk • Experience with compliance standards and certifications such as SOC 2 and ISO 27001 • Relevant certifications such as GCIH, GCFE, GCFA, or PNPT are valued but not required • Proven experience building AI-enabled security or incident response tooling and explaining design choices, iterations, downstream workflow changes, and measurable impact • Must already be legally authorized to work in the United States or Canada; no work authorization, relocation assistance, or visa sponsorship/transferring is offered • Successful applicants must complete a background check

🏖️ Benefits

• Health benefits • Dental benefits • 401(k) (USA-based roles) • RRSP (Canada-based roles) • Generous paid time off (PTO) • Equity grant / RSU program for most employees • Incentive programs, where applicable • Maternity and parental leave top-up programs • Retirement matching program • Free 1Password account • Paid volunteer days • Peer-to-peer recognition through Bonusly • Remote-first work environment • Travel for in-person engagement, including annual department-wide offsites, team meetings, and customer/industry events