{"id":2008864,"url":"https://alion.io/job/redpanda-staff-security-engineer-2","title":"Staff Security Engineer","company":{"id":592,"name":"Redpanda","domain":"redpanda.com","url":"https://alion.io/company/redpanda","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Welcome to the Jungle","truth_index":null},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":210000,"max":247000,"currency":"USD","period":"year","gross":null,"usd_annual":247000},"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"C++","optional":false},{"name":"CI/CD","optional":false},{"name":"FedRAMP","optional":false},{"name":"GCP","optional":false},{"name":"GitHub","optional":false},{"name":"HIPAA","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Redpanda","optional":false},{"name":"Rust","optional":false},{"name":"SLSA","optional":false},{"name":"SOC 2","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-09-05T00:14:23Z","employer_posted_date":"2026-10-07","last_verified_at":"2026-10-13T16:44:53Z","board_verified":true,"closed_at":null,"days_open":38,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":38},"description":"Join Redpanda, a remote-first company, as a Staff Security Engineer. In this role, you will own and scale application security across Redpanda's products, including the C++ core streaming engine, Go cloud control plane, Console, and Rust/Go data-transform SDKs. You will work closely with engineering teams to integrate security into the development process and help shape the technical direction of the application-security practice.\nMissions\nAnalyzing and breaking real systems code, building automation for security, and helping teams ship faster.\nLeading threat modeling and secure design reviews for new product features, and owning application security testing.\nDriving deep secure code review in systems languages, partnering with engineering to eradicate vulnerabilities.\nProfil recherché\n - Comfort with the security risks of memory-unsafe code and the appetite to fuzz it; fuzzing or sanitizer experience is a strong plus- The ability to review and reason about code in a systems language (C++ or Rust strongly preferred, since our core engine is C++; Go valuable across the cloud control plane and tooling), whether reviewing it directly or with AI assistance, with strong instincts for memory safety, concurrency, and the vulnerability classes that matter (use-after-free, buffer overflow, injection, authorization flaws)\n- Demonstrated experience leading threat modeling and secure design reviews for non-trivial systems\n- Working knowledge of software supply-chain security (dependencies, SBOMs, signing, SLSA) and secure CI/CD practices\n- Practical proficiency with the AppSec toolchain (SAST, SCA, secret scanning, DAST) and the judgment to apply risk-based prioritization rather than rigid textbook approaches\n- Familiarity with cloud (AWS / GCP / Azure) and Kubernetes security as it relates to the application layer\n- Excellent written and verbal communication skills; comfortable working in a globally distributed, async environment (e.g., GitHub)\n- 7+ years in application or product security or adjacent specialties, with a track record of owning AppSec initiatives end-to-end and influencing engineering teams without direct authority\n- Experience with fuzzing (libFuzzer / AFL++ / OSS-Fuzz) and sanitizers (ASan / UBSan / MSan) on a C or C++ codebase\n- Background securing distributed systems, databases, or data-infrastructure products, including threat modeling consensus / replication and multi-tenant isolation\n- Exposure to compliance programs (SOC 2, ISO 27001, HIPAA, FedRAMP) from the engineering-evidence side\n- Experience running a PSIRT, operating as a CNA, or managing a bug bounty / coordinated disclosure program\n- Contributions to open-source security, or experience handling vulnerabilities in a public open-source repository","description_format":"text","description_chars":2765,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Stream Processing & Real-Time Data"],"lifecycle":[{"event":"open","at":"2026-10-07T12:58:09Z"}],"visa":[],"liveness":{"score":35,"band":"fade","label":"Fading","p_open":1,"p_active":0.632,"p_room":0.55,"age_days":38,"expected_fill_days":26,"reasons":["conf:2","win:tail"],"computed_at":"2026-10-13T05:45:00Z"},"pay":{"stated_usd_annual":247000,"is_top_pay":true},"html_url":"https://alion.io/job/redpanda-staff-security-engineer-2","json_url":"https://alion.io/job/redpanda-staff-security-engineer-2.json","meta":{"generated_at":"2026-10-13T16:54:33Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":25681,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":592},"rest":"https://alion.io/mcp/rest/get_company?id=592"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fredpanda-staff-security-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fredpanda-staff-security-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fredpanda-staff-security-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/redpanda-staff-security-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fredpanda-staff-security-engineer-2"}]}