Posted in

Security Engineer

Security Engineer

CompanyRetool
LocationSan Francisco, CA, USA
Salary$164600 – $222600
TypeFull-Time
Degrees
Experience LevelMid Level, Senior

Requirements

  • 3+ years of experience in security engineering or related fields, implementing secure, scalable software used across multiple teams
  • Proficiency with Kubernetes, cloud platforms (e.g., Azure or AWS), Docker, and web security
  • A proven track record in security architecture, building secure-by-design systems and scaling designs to accommodate a growing user base, while also safeguarding their data
  • Dedication to facilitating productivity for product teams through secure architectural solutions combined with hands-on experience deploying features to business-critical production applications
  • Enthusiasm for cross-functional collaboration, working with engineering, sales, people ops, finance, and more to drive impactful outcomes
  • A keen ability to break down complex problems and lead cross-functional projects to robust solutions, with a focus on championing security initiatives and enhancing product security posture
  • An empathetic approach to software engineering, actively identifying and mitigating potential vulnerabilities while mentoring and elevating the skills of fellow teammates
  • Effective communication of threat models and risks to foster understanding and alignment across teams, while also demonstrating familiarity with communicating work through specifications or design documents.

Responsibilities

  • Work with the broader engineering organization on new projects and initiatives that improve the security and resilience of Retool
  • Develop technical solutions to help mitigate security vulnerabilities, solve systematic security weaknesses, and product security features—you’ll be writing code!
  • Regularly perform technical security assessments, code audits, and design reviews.
  • Drive evaluations to identify and remediate attack vectors against Retool products and platforms.
  • Support in overseeing our pen-testing and bug bounty programs
  • Assist in managing governance, risk, and compliance
  • Deliver guidance and education to developers on best practices for security and privacy, aiming to prevent the creation of vulnerabilities
  • Champion, promote, and advocate for security and secure practices throughout Retool.

Preferred Qualifications

    No preferred qualifications provided.