Senior/Staff Security Engineer

Linear

. Operate, automate, and extend vulnerability management end-to-end .

Posted 10/15/2026full-timeRemoteSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in vulnerability management, product security testing, and incident response, with a strong focus on cloud security and automation. Proficient in leading security incidents and communicating technical findings to diverse stakeholders.

Highest-signal resume keywords

Vulnerability ManagementProduct Security TestingIncident ResponseCloud SecurityTypeScript Proficiency

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability ManagementProduct Security TestingIncident ResponseCloud SecurityTypeScriptScriptingAutomationThreat ModelingSecurity ToolingConfiguration Hardening

Soft Skills

PrioritizationEscalationCommunication

Tools & Technologies

GCPKubernetesPostgresCloudflareLinear AgentClaudeCodexGitHubSlackGoogle Workspace

Industry Keywords

Security EngineeringBug Bounty ProgramRisk ManagementCompliance RequirementsGRC/Trust

Tech Stack

Tools & technologies

CloudGoogle Cloud PlatformKubernetesNode.jsPostgresTypeScript

About the role

Key responsibilities & impact

Operate, automate, and extend vulnerability management end-to-end
Triage, prioritize, and drive remediation across product, infrastructure, and dependencies
Run the bug bounty program, including report triage, severity validation, remediation coordination, and researcher relationship management
Lead product security testing, including threat modeling, design and code reviews, and manual and tool-assisted testing
Respond to security incidents, lead investigation and containment, drive postmortems, and implement hardening work
Own portions of cloud and infrastructure security across GCP, Kubernetes, and Postgres
Harden configurations and partner with infrastructure engineering on secure defaults
Build and maintain security tooling and automation, including AI/LLM-assisted workflows
Partner with GRC/Trust on risk registers, control evidence, and compliance requirements

Requirements

What you’ll need

5+ years across security engineering
Real depth in at least two of: vulnerability management, product/appsec testing, incident response, and cloud security
Ability to read and reason about code, particularly TypeScript
Comfort in cloud environments; GCP is a plus
Experience using AI coding/security tools such as Linear Agent, Claude, and Codex
Ability to lead security incidents from first alert through postmortem
Ability to build scripts and security tools to automate manual processes
Ability to prioritize practical risk reduction
Ability to set priorities independently and know when to escalate
Ability to explain technical findings to non-technical stakeholders and document actionable findings
Hands-on experience with Cloudflare, Google Cloud, Kubernetes, Postgres, and Node
Experience with Linear, GitHub, Slack, Google Workspace, Claude, ChatGPT, Vanta, GitHub Advanced Security, RunReveal, and SentinelOne

Benefits

Comp & perks

Competitive salary and equity
Employee-friendly equity terms including early exercise in the US and extended exercise windows
Daily meal and coffee stipend on every workday
Paid co-working space or desk
Health coverage (based on country requirements)
5 weeks paid vacation, plus local statutory holidays
4 months paid parental leave
Paid month off after 4 years & every 2 years thereafter
Regular team events and off-sites
Remote-first with no required commute