{"id":2527621,"url":"https://alion.io/job/linkedin-staff-security-engineer-enterprise-third-party-risk-management","title":"Staff Security Engineer - Enterprise & Third Party Risk Management","company":{"id":13163,"name":"LinkedIn","domain":"linkedin.com","url":"https://alion.io/company/linkedin","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":true,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":{"grade":"B","score":80,"open_postings":13,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":20,"computed_at":"2026-10-28T05:59:10Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Mountain View, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":156000,"max":255000,"currency":"USD","period":"year","gross":null,"usd_annual":255000},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Claude","optional":false},{"name":"ISO 27001","optional":false},{"name":"Java","optional":false},{"name":"PCI DSS","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-09-23T22:29:48Z","employer_posted_date":"2026-09-23","last_verified_at":"2026-10-28T02:03:48Z","board_verified":true,"closed_at":null,"days_open":34,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":34},"description":"LinkedIn is the world's largest professional network, built to create economic opportunity for every member of the global workforce. Our products help people make powerful connections, discover exciting opportunities, build necessary skills, and gain valuable insights every day. We're also committed to providing transformational opportunities for our own employees by investing in their growth. We aspire to create a culture that's built on trust, care, inclusion, and fun - where everyone can succeed.\nJoin us to transform the way the world works.\n At LinkedIn, our approach to flexible work is centered on trust and optimized for culture, connection, clarity, and the evolving needs of our business. The work location of this role is hybrid, meaning it will be performed both from home and from a LinkedIn office on select days, as determined by the business needs of the team.\nThis role will be hybrid in LinkedIn’s Mountain View office location.\nAbout the Team\nLinkedIn's members entrust us with their information every day and we take their security seriously. Our core value of putting our members first powers all the decisions we make, including how we manage and protect the data of our members and customers. Information Security at LinkedIn is dedicated to protecting and securing business-critical member data and company assets. Our core mission is to empower LinkedIn to create a secure and thriving platform for every member of the global workforce.\nLinkedIn’s Enterprise & Third-Party Security team is dedicated to protecting our data, systems, and global members by managing security and privacy risks throughout our external ecosystem. We collaborate across the organization to evaluate the security maturity of our partners and suppliers, identifying systemic threats and providing the technical guidance necessary for the secure integration of external services. Our mission is to leverage security engineering, advanced risk analytics, and automation to provide continuous assurance and visibility throughout the third-party lifecycle. We are committed to building scalable, high-impact solutions that mitigate vulnerabilities and ensure all external engagements align with LinkedIn’s rigorous security, privacy, and regulatory standards.\nAbout the Role\nAs a Staff Security Engineer focused on Third-Party Technology Security (TPS), you will strengthen LinkedIn's security posture by identifying and mitigating security risks introduced by third-party technologies, services, platforms, and integrations.You will be a foundational technical leader driving enterprise security initiatives responsible for evolving the TPS program beyond traditional security governance, risk and compliance programs to an engineering driven program that designs, automates, and scales the controls, workflows and tooling that protect LinkedIn and our customers. The ideal candidate is equally comfortable shaping policy and shipping modern tooling using Python, Claude, and other agentic coding platforms to replace manual GRC work with scalable, code defined workflows. They will partner with enterprise innovation, GRC, procurement, legal, and technical security teams to ensure that third party vendors including complex SaaS/AI tools meet our security standards. You serve as the subject matter expert in transforming security risk management from a compliance oriented function into a security engineering discipline.\nResponsibilities:\nEstablish a foundational framework for third party security (TPS) assessment to automate and integrate security requirements seamlessly into the broader enterprise security ecosystem\n\nLead and mature the TPS including the design, implementation, and continuous improvement of processes, controls, and operational workflows\n\nArchitect AI drive automation to accelerate vendor on boarding velocity and implement a centralized data engine that provides executive level visibility and granular risk metrics across LI\n\nBuild and maintain automation that replaces manual GRC tasks like intake, triage, evidence collection, control validation, tracking, escalation, and reporting using either Python or agentic coding tools\n\nDesign and operate workflow orchestration and integrations across systems like ticketing, GRC platforms, vendor management tools, identity provides and cloud control planes\n\nTranslate ambiguous business requirements into practical, scalable security solutions and decision frameworks\n\nIdentify opportunities to automate manual processes across the program and prototype solutions yourself rather than waiting on an engineering backlog\n\nDrive program operational excellence by establishing repeatable processes, service level expectations, metrics, and reporting for third party security risk management\n\nManage complex escalations, act as technical lead for escalations, evaluating edge case architectures and designing technical roadmaps for high risk vendors to ensure they meet LinkedIn’s security standards\n\nAct as lead incident commander within LinkedIn in the event of data security breach of third party and drive successful resolution\n\nPartner with other teams in InfoSec to conduct holistic reviews and engineer “paved path” blueprints for common high risk third party scenarios\n\nConduct threat modeling on high risk integrations and partner with Security SMEs for deeper diligence\n\nAct as trusted advisor and SME on third party security risk management, helping stakeholders make informed risk based decisions\n\nProvide foundational technical leadership and mentorship to security engineers, driving strategic direction and high impact risk reduction initiatives across the org\n\n Basic Qualifications\nBA/BS degree in Computer Science, Cybersecurity, Information Security, or related technical field, or equivalent technical experience\n\n5+ years of experience leading technical security reviews and risk assessments for third-party technologies, SaaS platforms, cloud services, APIs, enterprise applications, or vendor integrations.\n\n5+ years of experience in security engineering with in-depth knowledge in one or more areas such as application security, cloud security, security architecture, identity and access management, infrastructure security, or software supply-chain security\n\n5+ years of experience with technical security assessment methodologies such as threat modeling, security architecture or security design reviews\n\nExperience with programming languages such as Java, GO, or Python and building automation or tooling to improve security engineering workflows\n\nExperience with industry based information security and controls frameworks like NIST, PCI DSS, SOC 2, and ISO 27001\n\nPreferred Qualifications\nBS and 8+ years of relevant work experience, MS and 7+ years of relevant work experience, or PhD and 4+ years of relevant work experience\n\nExperience building or scaling a Third-Party Security, Vendor Security, or Supply Chain Security programs within a large scale technology company\n\nExperience integrating security workflows across GRC platforms, ticketing systems, identity providers, cloud platforms, asset inventories, and vendor management systems.\n\nExperience designing automation that replaces manual security governance, risk management, or compliance processes, including intake, evidence collection, risk assessment, control validation, reporting, and workflow orchestration\n\nExperience building, deploying and reviewing automation for complex security workflows, including use of both AI driven and traditional automation tools\n\nExperience building automation or security tooling that improves assessment coverage, control validation, attack-surface identification, or continuous security monitoring\n\nDemonstrated ability to identify systemic security risks and translate individual security findings into platform-level controls and architectural improvements\n\nAbility to partner with global stakeholders to align technical strategies and security initiatives with broader organizational objectives\n\nDemonstrated ability to influence architecture and engineering decisions across multiple organizations without direct authority\n\nAbility to understand the communicate technical issues to non technical teams\n\nDemonstrated ability to drive projects towards completion\n\nHands on experience with agentic coding tools\n\nExcellent verbal and written skills\n\nSuggested Skills\nThird-Party Security & Vendor Risk Engineering\n\nSecurity Automation\n\nSecurity Design Reviews & Threat Modeling\n\nTechnical Leadership\n\nYou will Benefit from our Culture\nWe strongly believe in the well-being of our employees and their families. That is why we offer generous health and wellness programs and time away for employees of all levels.\nLinkedIn is committed to fair and equitable compensation practices. The pay range for this role is $156,000 to $255,000. Actual compensation packages are based on a wide array of factors unique to each candidate, including but not limited to skill set, years & depth of experience, certifications and specific office location. This may differ in other locations due to cost of labor considerations.\nThe total compensation package for this position may also include annual performance bonus, stock, benefits and/or other applicable incentive compensation plans. For additional information, visit: https://careers.linkedin.com/benefits.\n Equal Opportunity Statement\nWe seek candidates with a wide range of perspectives and backgrounds and we are proud to be an equal opportunity employer. LinkedIn considers qualified applicants without regard to race, color, religion, creed, gender, national origin, age, disability, veteran status, marital status, pregnancy, sex, gender expression or identity, sexual orientation, citizenship, or any other legally protected class.\nLinkedIn is committed to offering an inclusive and accessible experience for all job seekers, including individuals with disabilities. Our goal is to foster an inclusive and accessible workplace where everyone has the opportunity to be successful.\nIf you need a Reasonable Accommodation to search for a job opening, apply for a position, or participate in the interview process, connect with us and describe the specific Accommodation requested for a disability-related limitation.\nFill out an Accommodation request here: https://app.smartsheet.com/b/form/b660a0327d044969abfd7a4e73d15c36\nReasonable accommodations are modifications or adjustments to the application or hiring process that would enable you to fully participate in that process. Examples of reasonable accommodations include but are not limited to:\nDocuments in alternate formats or read aloud to you\nHaving interviews in an accessible location\nBeing accompanied by a service dog\nHaving a sign language interpreter present for the interview\nA request for an accommodation will be responded to within three business days. However, non-disability related requests, such as following up on an application, will not receive a response.\nLinkedIn will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by LinkedIn, or (c) consistent with LinkedIn's legal duty to furnish information.\nSan Francisco Fair Chance Ordinance\nPursuant to the San Francisco Fair Chance Ordinance, LinkedIn will consider for employment qualified applicants with arrest and conviction records.\nPay Transparency Policy Statement\nAs a federal contractor, LinkedIn follows...","description_format":"text","description_chars":12509,"description_truncated":true,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Flexible schedule","Wellness"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["E-learning","Job Boards & Aggregators","Professional Networks"],"lifecycle":[{"event":"open","at":"2026-10-14T12:24:37Z"}],"visa":[],"liveness":{"score":24,"band":"cold","label":"Long shot","p_open":1,"p_active":0.542,"p_room":0.45,"age_days":34,"expected_fill_days":20,"reasons":["conf:3","stale_co","velocity","win:tail","comp:brand"],"computed_at":"2026-10-28T05:59:10Z"},"pay":{"stated_usd_annual":255000,"is_top_pay":true},"html_url":"https://alion.io/job/linkedin-staff-security-engineer-enterprise-third-party-risk-management","json_url":"https://alion.io/job/linkedin-staff-security-engineer-enterprise-third-party-risk-management.json","meta":{"generated_at":"2026-10-28T06:29:18Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8598,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-29T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":13163},"rest":"https://alion.io/mcp/rest/get_company?id=13163"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Flinkedin-staff-security-engineer-enterprise-third-party-risk-management"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Flinkedin-staff-security-engineer-enterprise-third-party-risk-management"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Flinkedin-staff-security-engineer-enterprise-third-party-risk-management"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/linkedin-staff-security-engineer-enterprise-third-party-risk-management\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Flinkedin-staff-security-engineer-enterprise-third-party-risk-management"}]}