Buffer

Security Engineer

• Define Buffer’s security strategy and roadmap, set priorities, drive execution, and establish security standards
• Identify security problems, define solutions, and build tooling, automation, and processes
• Integrate security into development through PR checks, threat modeling, dependency, secrets, and supply-chain hygiene
• Advance operational security while preserving Buffer’s high-trust environment
• Manage the security inbox, requests from other teams, maintenance, and chores
• Lead security incidents and participate in the engineering-wide on-call rotation
• Run incident-response tabletops and ensure identified gaps are fixed
• Threat-model AI agents, connectors, and in-product AI; establish security guardrails
• Triage vulnerability-disclosure reports and manage the vulnerability disclosure program
• Own SOC 2, Meta platform compliance, customer security questionnaires, and customer trust initiatives
• Collaborate with product engineering teams on technical-spec reviews and grow security champions
• Support Advocacy and People teams with security and compliance needs
• Report to Miguel, Engineering Manager for Infrastructure and Security

Explore Lead Security Engineer at Buffer. Review requirements and application details.

Open roles

Lead Security Engineer