[Hiring] Humbly Confident Security Engineer @YNAB

Role Description

This role involves ensuring the security of YNAB and its customers. The security team is dedicated to safeguarding YNAB with a primary outcome to achieve:

• Keep YNAB Secure.

In this hands-on, highly technical role, you’ll join forces with Kendal to make YNAB Even More Secure™. Your responsibilities will include:

• Implementing security controls and processes.
• Configuring and maintaining security tooling across the organization.
• Implementing and optimizing access controls, authentication systems, and data protection measures.
• Writing automation scripts, analyzing security logs, and maintaining security infrastructure.
• Collaborating with engineers to integrate security into the development lifecycle.
• Conducting security testing of new features and systems.
• Monitoring security events, analyzing threats, and responding to security incidents.
• Supporting bug bounty program activities and coordinating responses to external security reports.

Qualifications

• At least two years of hands-on experience in security engineering, software engineering, DevOps, IT security, or a closely related technical field.
• Practical experience with application security (e.g., performing code reviews, threat modeling, working with developers on secure design).
• Experience building, maintaining, or monitoring security logs (preferably with DataDog or similar systems).
• Some level of formal technical education and/or a security-related certification (e.g., CISSP, CEH, Security+, CC, CCSP, Pentest+, or similar).
• Proficiency in at least one modern programming or scripting language (e.g., Python, Go, Java, JavaScript).
• Familiarity with security frameworks such as SOC 2, ISO 27001, NIST, or CIS Controls.
• Experience working at a technology and/or SaaS company.
• Exposure to regulated industries (e.g., finance, healthcare).
• Comfort working cross-functionally with engineering, support, or compliance teams.

Requirements

• Live in the United States, in either the Central (UTC-6) or Eastern (UTC-5) timezone, and be authorized to work here without sponsorship.

Benefits

• Minimum vacation policy of three weeks per year, with five weeks feeling about right.
• Two extra weeks for company-wide December Break.
• Health, dental, and vision insurance, covering 100% of the premium for you and your family.
• Traditional and Roth 401(k) options with YNAB matching contributions up to six percent.
• Professional development stipend for conferences, online courses, coaching, and dedicated time away from work to learn.
• Generous paid family leave, vacation, holidays, and sick time.
• Annual raise and profit-sharing twice a year.
• A shiny new computer provided and replaced every three years.