157 applicants

Company

honeycomb.io · 5 hours ago

Staff Security Engineer

USA

Full-time

Remote

Lead/Staff

$210K/yr - $235K/yr

Maximize your interview chances

Cloud Data ServicesData Visualization

No H1B

Insider Connection @honeycomb.io

Discover valuable connections within the company who might provide insights and potential referrals.
Get 3x more responses when you reach out via email instead of LinkedIn.

Responsibilities

Contribute to the long-term roadmap for our Security Team, while strategically providing guidance to colleagues and hands-on technical work as needed to support the development of an early-stage security program

Collaborate with Product and Engineering partners to define when security reviews are necessary, perform security reviews accordingly, and assist in the development of vulnerability remediation strategies as needed

Partner with colleagues throughout the organization to determine which tools the Security Team needs to work effectively, and implement those tools accordingly

Act as a force multiplier through working with engineers to develop threat modeling skills to maintain a high standard of autonomy and within the engineering organization without sacrificing security basics

Help maintain a culture of partnership, autonomy, sustainability, and iterative improvement

Partner with Engineering, Product, and IT organizations in our cloud-native environment to promote and develop a more secure production service

Contribute code to our internal applications and services to address classes of vulnerabilities to evolve our codebases toward secure coding practices

Respond to information security issues in each layer of our tech stack, in every stage of the software development lifecycle

Engage with the security community at large to learn about and bring innovative best practice to our Security and Engineering organizations

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Application SecurityFull-stack EngineeringVulnerability RemediationSecurity Incident ManagementEnterprise Security StandardsThreat ModelingAgile DeliveryPair ProgrammingCross-functional Collaboration

Required

Interdisciplinary experience within the security field.

Strength in application security, but comfortable working a security incident when needed.

Experience as a full-stack engineer writing code, reviewing pull requests, and supporting vulnerability remediation efforts.

Understanding of what kinds of detections are important in an early-stage security organization.

Experience scaling to Enterprise customers.

Understanding the security expectations of Enterprise customers.

Comfort with adjusting expectations.

Ability to balance planned security initiatives against the interruptions of vulnerability disclosures and security incidents.

Strong sense of teamwork and a willingness to build.

Experience working on teams requiring collaboration with cross-functional partners.

Ability to balance security concerns with delivering value.

Benefits

Generous equity with employee-friendly stock program

401k plan to help you plan for your future

100% employee coverage for Health, Dental, Vision, Life and Disability insurance and 75% for dependents

Unlimited PTO policy

Company wide break at the end of the year

$600 a year to spend on the perks that you care about most

Work Life Balance and Flexible Schedule options

The tech you need AND a $500 Home Setup Stipend

$200 Reimbursement for Cell/Wifi/CoWorking

$1500+ Annual Professional Development Allowance

Up to 16 weeks of paid parental leave, regardless of path to parenthood

Maven Inclusive Family-Building benefit including unlimited virtual appointments, coaches & counselors, and $10K ‘wallet’ to support adoption, surrogacy, IVF, and egg/sperm freezing

Modern Health well-being benefit including self guided resources and access to 12 mental health and 8 coaching sessions - at no additional cost to you.

Semi-annual performance conversations (we call them Review & Rewards conversations)

Annual compensation review, benchmarking to industry and inflation changes