Lead Security Engineer at CodeRabbit creating high-performance human-machine collaboration tools. Leading security engineering, incident response, and building resilient infrastructure.
Responsibilities
Own the security roadmap — craft and execute a strategic security engineering plan that aligns with CodeRabbit’s fast-paced engineering cadence.
Be Incident Commander — spearhead security incident response and recovery: triage, resolve, root cause, and turn those learnings into stronger systems.
Tools & automation — build or integrate security tooling (SAST, DAST, SIEM, EDR, monitoring) into the developer workflow without slowing delivery.
Embed security fluently — partner with engineering and product teams to bring secure practices early into planning and daily workflows.
Talent & culture — help to hire, coach, and mentor a scrappy, resilient security engineering team; elevate security awareness across the company.
Compliance & policy — establish security standards, frameworks, or processes that evolve as we scale—but remain lean and developer-friendly.
Requirements
Battle-tested experience: 8+ years in security engineering, incident response, or correlated fields—bonus if you've led through a major production breach or targeted attack.
Technical depth: Extensive experience with security across software and infrastructure—threat modeling, pen testing, secure CI/CD pipelines, cloud security, incident response.
Strategic mindset: Ability to translate risk into actionables, communicate trade‑offs with engineering/product leadership.
Praxis over theory: You’ve taken production systems down (intentionally or unintentionally) and built them back stronger.
Security in chaos: Experience in pressure situations—with clarity, direction, and calm.
Developer‑centric approach: You can speak fluent dev-tools, empathize with fast-moving teams, and secure them without slowing them down.
Benefits
Compensation That Reflects Responsibility: We deliver a competitive package—salary, equity, and benefits—to match the importance and intensity of this role.
Hybrid Culture That Adapts to You: We collaborate in person in the Bay Area every week, but leave room for remote heads-down focus. It’s security, not surveillance.
Sales Executive at Johnson Controls connecting businesses with security solutions and managing customer relationships. Expanding accounts and driving results in commercial security technologies.
Business Information Security Officer leading Cyber Security Risk & Control maturity at Coles. Collaborating closely with Customer & Digital team to enhance security frameworks and controls.
Enterprise Security Architect responsible for security architecture in Novartis' Digital Workspace. Collaborating with teams to ensure implementations meet security policies and industry standards.
Lead Product Security at Bupa, driving cybersecurity in digital products and cloud platforms. Oversee security frameworks, manage teams, and ensure compliance with industry standards.
IT Audit Senior managing client expectations and delivering detailed audit analyses and findings. Collaborating with management on IT audit engagements in a leading advisory firm.
Enterprise Security Architect specializing in Digital Workspace security at Novartis. Responsible for ensuring security standards and practices across IT functions and collaborating with various teams.
Cyber Security Engineer responsible for administering security tools and projects. Collaborating with stakeholders to ensure the overall Cyber Security of the firm.
Facility Security Officer responsible for developing and administering security programs for classified materials. Overseeing compliance with federal security regulations at the Rochester, NY site.
Security Support D managing security processes essential for classified operations. Focused on document control, compliance, and training within a regulated environment.
Intern supporting cybersecurity consulting with Guidehouse's federal clients. Engaging in hands - on projects and learning development opportunities within a structured internship program.