Lead Security Engineer

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $171.1k - $222.9k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 3%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Buffer

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2010

📣 Marketing

💼 Consulting

✈️ Travel

💰 Venture Round - Buffer on 2017-07

Marketing • Consulting • Travel

Buffer is a SaaS social media management platform that helps creators, small businesses, agencies, and nonprofits plan, create, schedule, publish, engage, and analyze content across multiple social channels. It offers content creation tools (including an AI assistant), collaborative workflows and approvals, community engagement features, analytics and reporting, and a customizable link-in-bio Start Page. Buffer integrates with major social platforms such as Instagram, Facebook, X, TikTok, LinkedIn, Pinterest, YouTube, Mastodon, Bluesky, and Threads to streamline publishing and grow audiences.

📋 Description

• Define Buffer’s security strategy and roadmap, set priorities, drive execution, and establish security standards • Identify security problems, define solutions, and build tooling, automation, and processes • Integrate security into development through PR checks, threat modeling, dependency, secrets, and supply-chain hygiene • Advance operational security while preserving Buffer’s high-trust environment • Manage the security inbox, requests from other teams, maintenance, and chores • Lead security incidents and participate in the engineering-wide on-call rotation • Run incident-response tabletops and ensure identified gaps are fixed • Threat-model AI agents, connectors, and in-product AI; establish security guardrails • Triage vulnerability-disclosure reports and manage the vulnerability disclosure program • Own SOC 2, Meta platform compliance, customer security questionnaires, and customer trust initiatives • Collaborate with product engineering teams on technical-spec reviews and grow security champions • Support Advocacy and People teams with security and compliance needs • Report to Miguel, Engineering Manager for Infrastructure and Security

🎯 Requirements

• Must be based between UTC-3 and UTC+3 • Senior security experience without a CISO above you • Hands-on application and API security experience in a multi-tenant SaaS, ideally with a public API • Experience with authorization models, OAuth, OIDC, session and authentication flows, IDOR, SSRF, and threat modeling • Experience finding and fixing security bugs • Ability to write and modify TypeScript code and review code; familiarity with legacy PHP and Python • Experience leading security incidents end-to-end, including status updates, customer communications, and postmortems • Experience with AWS, Kubernetes, and Cloudflare, or similar technologies • Experience running or closely supporting a SOC 2 or similar program • Experience automating evidence collection • Experience running or triaging a vulnerability disclosure or bug bounty program • Fluency with modern AI tools and experience securing systems that use them • Ability to thrive in remote, asynchronous environments • Strong written communication and follow-through • Familiarity with Buffer or social media management tools is a bonus • Experience working fully remotely as part of a distributed team for one year or more • Experience merging code into a production codebase reviewed by other engineers within the last 12 months

🏖️ Benefits

• Equity • Two paid days working with the team during the collaboration period • Fully distributed and remote work environment • Travel to work together in person once or twice per year • Transparent, fair, simple, and generous compensation approach

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume