Description:

Linear is seeking a Staff Security Engineer with a strong InfraSec background to lead and own security initiatives across the company.
The role involves close collaboration with the infrastructure team, product, and customers to improve the company's security posture.
The candidate will report directly to the Co-Founder and is expected to have a builder mentality and a pragmatic approach to security.
Responsibilities include owning application and infrastructure security (GCP, k8s), defining product security vision and strategies, managing pentesting, and communicating security posture to customers.
The engineer will assess and improve the security posture of supporting infrastructure and third-party integrations, coordinate security incident response efforts, and collaborate on SOC2 compliance and vendor security audits.
Linear is a fully remote company, supporting hiring within the US and most EU time zones.

Requirements:

Candidates must have 5+ years of experience in product or application security with expertise in secure software development and infrastructure security.
Startup experience is required.
Strong communication skills and the ability to interact with customers are essential.
A deep understanding of threat modeling, risk management, and vulnerability assessment methodologies is necessary.
Candidates should have strong experience with AWS or GCP (preferred).
Experience with secure API development, infrastructure security, and addressing emerging security challenges is required.
A background in Javascript/Typescript and Node.js, along with familiarity with secure coding practices, is needed.
Hands-on experience with security tools and integrating automated security testing into CI/CD pipelines is essential.

Employees will engage in interesting and challenging work while maintaining a work-life balance.
The position offers a competitive salary and equity, with employee-friendly equity terms including early exercise and extended exercise.
Paid lunch and coffee are provided during workdays, and employees can work remotely without commuting to an office.
A paid co-working space/desk at an office is available.
Health, dental, and vision insurance is provided for employees in the US.
Regular team events and off-sites are organized.
Employees receive 5 weeks of paid vacation and 4 months of paid parental leave.