Senior Security Engineer

Join Mattermost as a Senior Security Engineer, where you will play a crucial role in protecting our people, infrastructure, and tooling. This hands-on position involves leading the design and implementation of security tooling, hardening our cloud and IT infrastructure, and responding to incidents. You will work closely with a globally distributed team and partner with Engineering to manage AI-enabled risk. Enjoy the benefits of fully remote work, unlimited vacation, health benefits, and more.

• Lead the design and implementation of security tooling, harden cloud and IT infrastructure, and serve as a key responder to incidents.
• Detect, investigate, and remediate security incidents using SIEM, EDR, and SOAR tooling, and conduct threat hunting across cloud and endpoint environments.
• Partner with Engineering to assess and mitigate risks from AI-enabled tools and workflows, and explore and implement AI/automation in detection, analysis, and response pipelines.
• 3+ years of hands-on experience in security engineering and incident response
• Excellent written and verbal communication skills
• Experience with SIEM platforms and security monitoring systems
• Experience with cloud security controls across AWS, GCP, and/or Azure
• Bachelor’s degree in Computer Science or a related field, or significant professional security experience
• Knowledge of SOAR platforms and automation of security workflows
• Experience with IAM solutions and infrastructure automation
• Familiarity with Zero Trust architecture principles and threat hunting methodologies
• Experience managing security of Microsoft 365 and Google Workspace tenants
• Practical experience evaluating security implications of AI systems and AI-assisted workflows
• Experience with EDR tools such as CrowdStrike or SentinelOne
• Strong knowledge of Linux systems and Kubernetes/Docker environments
• Experience with certification processes: SOC2, ISO 27001, FedRAMP, or Cyber Essentials Plus
• Certifications: OSCP, GCIH, GCFA, or equivalent penetration testing / incident response credentials
• Background in open-source communities
• Endpoint security management experience in a fully remote organisation
• Experience in Go or Python