Senior Security Engineer, Mattermost

• Bachelor’s degree in Computer Science or a related field, or significant professional security experience
• 3+ years of hands-on experience in security engineering and incident response
• Experience with SIEM platforms and security monitoring systems
• Experience with EDR tools such as CrowdStrike or SentinelOne
• Knowledge of SOAR platforms and automation of security workflows
• Familiarity with Zero Trust architecture principles and threat hunting methodologies
• Experience with cloud security controls across AWS, GCP, and/or Azure
• Strong knowledge of Linux systems and Kubernetes/Docker environments
• Experience with IAM solutions and infrastructure automation
• Practical experience evaluating security implications of AI systems and AI-assisted workflows
• Experience managing security of Microsoft 365 and Google Workspace tenants
• Excellent written and verbal communication skills

Desirable

• We are hiring a Senior Security Engineer to protect the people, infrastructure, and tooling that goes into building and hosting Mattermost. This is a hands-on, high-impact role at the intersection of enterprise security engineering, cloud information security, and AI-enabled threat response
• As a Senior Security Engineer, you will lead the design and implementation of security tooling, harden our cloud and IT infrastructure, and serve as a key responder to incidents. You will work across a globally distributed team and partner closely with Engineering to manage AI-enabled risk
• Lead security and IT projects to enhance the security posture of infrastructure and the company
• Detect, investigate, and remediate security incidents using SIEM, EDR, and SOAR tooling (e.g. CrowdStrike, SentinelOne)
• Conduct threat hunting across cloud and endpoint environments using a Zero Trust framework
• Administer company-wide IAM and security monitoring infrastructure
• Contribute to security policies, incident response, forensics, and endpoint management programmes
• Partner with Engineering to assess and mitigate risks from AI-enabled tools and workflows
• Explore and implement AI/automation in detection, analysis, and response pipelines
• Engage closely with North American and international staff across time zones