Back to Remote jobs >
All others
Security Engineer
@Patreon
[Hiring] Security Engineer @Patreon
Apr 02, 2025 - Patreon is hiring a remote Security Engineer. 💸 Salary: unspecified. 📍Location: USA.
This description is a summary of our understanding of the job description. Click on 'Apply' button to find out more.
Role Description
This role is a Remote friendly role or open to those who are able to be in-office 2 days per week on a hybrid work model in our San Francisco or New York office.
We are looking for a mid-level (L4) Security Engineer to join our growing Security team. In this role, you will be responsible for designing and implementing security automation, detection, and response capabilities while also owning and streamlining Governance, Risk, and Compliance (GRC) functions. Your contributions will help ensure our platform and corporate environment remain protected and compliant, empowering us to scale securely.
What You Will Do
-
Design & Implement Security Solutions
- Architect and deploy tools and processes that strengthen our infrastructure and corporate security posture in cloud-native (AWS), containerized (Kubernetes/Docker), and on-prem environments.
- Engineer and maintain controls across multiple security domains (e.g., Endpoint Detection and Response, Cloud Detection and Response, CI/CD, SIEM, IAM, PKI, etc.).
-
Automate Security Detection & Response
- Develop and refine security detection rules, playbooks, and workflows to respond to threats in real time.
- Build integrations and automated pipelines leveraging DevOps/SecOps tools (e.g., Python scripting, APIs, webhooks) to accelerate investigation and remediation.
-
Security Incident Handling
- Triage and investigate security alerts and incidents, leading cross-functional coordination when required.
- Drive the continuous improvement of incident response processes and technologies used for detection and containment.
-
Governance, Risk & Compliance (GRC)
- Lead risk management efforts by conducting risk assessments, third-party vendor reviews, and compliance checks against frameworks (e.g., ISO, NIST, PCI, HIPAA).
- Develop and maintain security metrics (KRI/KPI/OKR) to communicate program effectiveness and inform strategic decisions.
- Contribute to audits, assessments, and certification processes; maintain and optimize GRC tooling to manage evidence gathering and continuous monitoring.
- Draft and evolve security policies, standards, and documentation in alignment with regulatory requirements and industry best practices.
-
Cross-Functional Collaboration
- Partner with Product, Engineering, Legal, and other business teams to embed security requirements into new and existing features.
- Provide threat modeling and security architecture guidance to software development teams to ensure secure design from the ground up.
-
Continuous Improvement & Thought Leadership
- Participate in proactive threat hunting and vulnerability management programs to reduce risk exposure.
- Remain current on industry trends, emerging threats, and new security technologies.
- Act as an internal champion for security awareness, training, and best practices across the organization.
Qualifications
- Minimum of 4 years of combined experience in Security Engineering, GRC, or related roles in an enterprise or cloud-native environment.
- Bachelor’s degree in Computer Science, Information Security, or related field (or 6+ years of relevant experience in lieu of degree).
Requirements
- Strong foundation in one or more programming/scripting languages (e.g., Python) for automation and tooling.
- Hands-on experience implementing and managing security controls (SIEM, SOAR, EDR, IDS/IPS, IAM).
- Demonstrated ability to evaluate and secure cloud infrastructure using IaC tools (e.g., Terraform, CloudFormation).
- Proficiency in threat detection, incident response, and investigation methodologies (familiarity with MITRE ATT&CK).
- Working knowledge of key security standards and regulations (e.g., NIST CSF, ISO 27001, HIPAA, PCI-DSS, GDPR).
- Experience executing audits, risk assessments, and managing compliance programs; familiarity with GRC platforms preferred.
- Ability to develop meaningful security metrics and translate technical details into business-impact language.
Benefits
- Competitive salary
- Equity plans
- Healthcare
- Unlimited paid time off
- Company holidays and recharge days
- Commuter benefits
- Lifestyle stipends
- Learning and development stipends
- Patronage
- Parental leave
- 401k plan with matching
Similar Remote Jobs
More jobs at Patreon
More All Others jobs
-
All others salary commensurate with experience PhilippinesApr 06, 2025
-
All others salary commensurate with experience PhilippinesApr 06, 2025
-
All others significant equity package USAApr 06, 2025
More jobs in USA
-
Customer Service unspecified USAApr 06, 2025 -
Marketing competitive and depends on location Europe, USA, Canada +2 moreApr 06, 2025
-
All others significant equity package USAApr 06, 2025
Kickstart Your Job Search
Need advice to apply?
Join our free
Webinar « 3
Mistakes to Avoid When Looking For A Remote Startup Job (And What To Do Instead) »
Register for free
Unlock 55,265 additional remote jobs, advanced search & email notifications
Get Access Now
Too many emails? Declutter your inbox with Meco
Your home for reading newsletters
Try for free - no card required.
️
| 📍 | Be aware of the location restriction for this remote position: USA |
| ‼ | Beware of scams! When applying for jobs, you should NEVER have to pay anything. Learn more. |
Back to Remote jobs >
All others
All others
|
Salary
💸
unspecified
|
Remote
Location
USA
|
|
Job Type
full-time
|
Posted
Apr 02, 2025
|
️
| 📍 | Be aware of the location restriction for this remote position: USA |
| ‼ | Beware of scams! When applying for jobs, you should NEVER have to pay anything. Learn more. |
