Lead Security Engineer

📋 Description

• Own the security roadmap — craft and execute a strategic security plan with cadence.
• Boost resilience — defense-in-depth: threat modeling, secure reviews, hardening, CI/CD integration.
• Be Incident Commander — lead security incident response and recovery; triage and learnings.
• Tools & automation — integrate SAST/DAST/EDR/SIEM into dev workflows.
• Embed security fluently — partner with engineering/product to bake secure practices early.
• Talent & culture — hire, coach, and mentor a security engineering team; raise awareness.

🎯 Requirements

• Battle-tested: 8+ years in security engineering or incident response; bonus if led major breaches.
• Technical depth: threat modeling, pen testing, secure CI/CD, cloud security, incident response.
• Strategic mindset: translate risk into actionables and communicate trade-offs.
• Praxis over theory: taken production systems down and rebuilt them stronger.
• Security in chaos: operate with clarity, direction, and calm under pressure.
• Developer-centric: fluent with dev-tools and secure fast-moving teams without slowing delivery.

🎁 Benefits

• Opportunity to work on AI-native developer tooling and code review with real impact.
• High-ownership engineering culture from proposal to production.
• Fast-paced, high-impact environment with autonomy and quick decision cycles.
• Collaborative, learning-focused team that values rapid iteration.
• Chance to influence security architecture at scale across CodeRabbit's platform.