Security Engineer [IC3]
Sourcegraph
WorldwideremotePosted 1 month ago
Skill Required
Security-EngineeringSecurity-OperationsApplication-SecurityInfrastructure-SecurityCloud-SecuritySecurity-EngineerIT-Security-EngineerInfrastructure-Security-EngineerCybersecurity-EngineerSecurity EngineersecuritySOCEngineeringTypeScriptKubernetesISO 27001developingObservabilityTerraformbuildingTestNGCloudSIEMGCPandGoAIFulltime
Key highlights
- Zone 2 salary: $144,000 USD; Zone 3: $108,000 USD; Zone 4: $72,000 USD
- Level IC3 (individual contributor)
- Meaningful equity included in compensation package
- Preference for Europe-based candidates with at least 10 hours/week EST overlap
- Must have practical experience with SIEM alerts, on-call rotations, and Go
- Nice-to-have: experience securing AI products
Role overview
Sourcegraph is building the infrastructure that gives engineering organizations full visibility across their systems, precise context for their AI agents, and the ability to execute coordinated code changes at scale. Backed by a16z, Sequoia, and Redpoint, the company serves customers like Stripe, Reddit, and Leidos and operates as a globally distributed team. This role is a Security Engineer (IC3) who will serve as part of the foundational team building a world-class security system trusted by some of the biggest tech companies in the world.
Responsibilities
- Work on security operations, maintaining and improving the monitoring and alerting stack
- Participate in on-call rotations and respond to security incidents
- Conduct application security testing, bug bounty programs, and security reviews for both application and infrastructure security
- Proactively improve the security of Sourcegraph's codebase, product, cloud, and customers' on-premise deployments
- Be onboarded to the alerting and monitoring stack
- Maintain internal systems such as automations that assist in alert triaging
- Work with other teams to triage, troubleshoot, and mitigate customer concerns and questions about security
- Enhance application security with audits, best practices, code fixes, and continuous education
- Perform reactive incident response if a security event occurs
- Collaborate with your manager on a career plan with actionable goals
- Perform proactive research to detect new attack vectors
- Perform threat modeling for existing and future applications
- Assess and integrate new tools and technologies to improve operational efficiencies
- Help maintain compliance with SOC 2, ISO 27001 & GDPR standards
Requirements
- Practical experience reviewing SIEM alerts and participating in on-call rotations
- Practical experience securing SaaS applications as a security generalist, including infrastructure security, application security, and/or compliance
- Experience with Go, including writing and maintaining internal tooling along with code reviews
- Experience with Elastic stack and GCP
- Experience using and automating a wide range of defensive security tools
- Experience working across engineering teams to secure projects across the organization
- High agency
- Effective communication in writing and documentation
Nice to have
- Experience developing software as an engineer (i.e., writing code and contributing directly to applications)
- Experience working in a startup environment
- Experience with TypeScript and Terraform
- Experience with Kubernetes
- Experience securing AI products
Benefits
- Meaningful equity
- Generous perks & benefits
- Above-market salaries
- Globally distributed team
- Competitive compensation wherever you live (pay bands are visible to every teammate)
- Equitable, explainable, and competitive compensation approach
Additional details
- Level: IC3
- Preference for candidates residing in Europe; hire almost anywhere in the world
- Working hours must overlap with EST for at least 10 hours/week
- Interview process takes less than 5 hours total, consisting of: 20-minute recruiter screen, 45-minute hiring manager screen/resume deep dive, 60-minute general technical interview, 60-minute complex problem deep dive technical interview, 45-minute cross-functional team collaboration/values interview, 15-minute leadership interview, reference checks, and background check
- Candidates may request additional conversations with anyone they would like to meet but did not get to meet during the interview process
- Sourcegraph is an equal opportunity workplace; welcomes people from all backgrounds
- Sourcegraph participates in E-Verify for U.S. Employees
- Original post: Himalayas
- Company mission: bring clarity and control to the world's most complex codebases using AI-driven tools like Code Search, Deep Search, MCP, and Agentic Batch Changes
- Customers include Stripe, Reddit, and Leidos
- Backed by a16z, Sequoia, and Redpoint
- Culture values high agency, direct communication, and customer love