Staff Security Engineer

Socket
United States
Workplace: RemoteFull timeFunction: CybersecuritySkills: ["Communication","Leadership","Problem-solving","Collaboration","Mentoring"]

Senior security-focused individual owning security across the company, covering application security, cloud infrastructure, operational security, IT, compliance, and incident response. You will write code and build tooling to make secure paths the default, drive the security roadmap, run 24/7 incident response, maintain SOC 2 and ISO 27001 certifications, and foster security awareness across the engineering org.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Socket
Socket
4 months ago

Staff Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 4 hours agoStatus: Live

Job Summary

Senior security-focused individual owning security across the company, covering application security, cloud infrastructure, operational security, IT, compliance, and incident response. You will write code and build tooling to make secure paths the default, drive the security roadmap, run 24/7 incident response, maintain SOC 2 and ISO 27001 certifications, and foster security awareness across the engineering org.
Location: United States
Workplace: Remote
Employment Type: Full time · Permanent
Job Function: Cybersecurity

Key Responsibilities

  • •Own the security program across the company, including application security, cloud infrastructure hardening, operational security, and IT security; write code and build tooling to make the secure path the default for engineers
  • •Assess and prioritize the security roadmap, balancing quick wins with long-term improvements and driving progress across multiple fronts
  • •Run 24/7 security incident response, manage the security inbox, triage vulnerability reports, coordinate pentests, and apply fixes
  • •Maintain SOC 2 compliance and drive new certifications (e.g., ISO 27001) as needed for enterprise customers
  • •Raise security awareness across the org by training engineers to write secure code and conducting phishing simulations

Pay and Benefits

Equity and Bonus:Equity
Perks:Health InsuranceEquityRemote Work

Key Requirements

  • •Security ownership at a growth-stage company or a strong software engineer transitioning into security with end-to-end ownership
  • •Ability to ship production TypeScript and build tooling to enable secure development
  • •Breadth across security domains (AppSec, CloudSec, OpSec) and willingness to learn quickly where gaps exist
  • •Fluency in cloud infrastructure (GCP) including VPCs, IAM, secret management, networking
  • •Self-directed with ability to move fast, unblock engineering, and teach security practices to the org
Experience:CybersecuritySecurity engineeringSoftware security
Skills:CommunicationLeadershipProblem-solvingCollaborationMentoring
Tech Stack:TypeScriptGCPIAMVPCSecret managementNetworkingPentestsSOC 2ISO 27001

Company Brief

Socket
Develops developer-focused tools and services to improve JavaScript/TypeScript package management, dependency workflows, and developer productivity for teams building modern web applications.
Industry: Developer Tools
Website