[Hiring] Staff Security Engineer @Redpanda Data

Role Description

We're looking for an experienced Staff Security Engineer to own and scale application security across Redpanda's products, from the C++ core streaming engine to our Go cloud control plane, Console, and Rust/Go data-transform SDKs. Security at Redpanda is an engineering problem, not a checklist: you'll spend your time analyzing and breaking real systems code, building the paved roads and automation that make the secure path the default, and helping teams ship faster because security is built in rather than bolted on.

You'll be one of two engineers on a small, high-trust product security team, partnering every day with the engineers who build a system that Fortune 500 companies trust with their most critical data. Reporting to the Director of Information Security and working alongside our infrastructure security engineer, you'll own the day-to-day application-security work:

• Secure SDLC
• Threat modeling
• Code-level vulnerability discovery
• Fuzzing the core engine
• Coordinated vulnerability disclosure and PSIRT response

As the application-security practice grows, you'll help shape its technical direction (in partnership with the Director, who owns the overall security program) and raise the security bar across all of engineering.

Qualifications

• 7+ years in application or product security or adjacent specialties
• Track record of owning AppSec initiatives end-to-end
• Ability to review and reason about code in a systems language (C++ or Rust strongly preferred)
• Strong instincts for memory safety, concurrency, and relevant vulnerability classes
• Comfort with the security risks of memory-unsafe code
• Practical proficiency with the AppSec toolchain (SAST, SCA, secret scanning, DAST)
• Demonstrated experience leading threat modeling and secure design reviews
• Working knowledge of software supply-chain security
• Familiarity with cloud (AWS / GCP / Azure) and Kubernetes security
• Excellent written and verbal communication skills

Requirements

• Lead threat modeling and secure design reviews for new product features
• Own and tune application security testing across C++, Go, and Rust
• Build fuzzing harnesses for the core engine
• Drive deep secure code review in systems languages
• Operate product security incident response (PSIRT) and coordinated vulnerability disclosure
• Strengthen software supply chain in partnership with platform engineering
• Stand up a security champions program and secure-by-default building blocks
• Define security requirements and shape security release gates
• Raise the security bar across engineering through standards and training

Benefits

• U.S. base salary range for this role is $210,000 - $247,000
• Consideration of job-related skills, location, experience, and education for salary determination
• Use of AI technology in screening and assessment of applications

Company Description

Join Redpanda if you’d enjoy being part of a fast-moving, diverse, people-first organization with team members around the globe and a culture based on trust, transparency, communication, and kindness. You'll dive into a nimble, high-impact team with the latest AI tools — and the budget to actually use them.