Senior Security Engineer, PagerDuty

• 5+ years of experience as a full-stack Security Engineer in a AWS native, micro-service SaaS environment
• Strong expertise in cloud security, particularly AWS services including but not limited to:
• GuardDuty, CloudTrail, Secrets Manager
• EKS/ECR, IAM family, Config
• Service Mesh architectures
• Proficiency with security tools:
• Vulnerability Management & EDR: Wiz, Snyk, Qualys/Nessus, Crowdstrike
• SIEM: SumoLogic or Splunk
• Experience with Infrastructure as Code and CI/CD:
• Terraform, Helm, Chef, Ansible, Buildkite, Jenkins, ArgoCD
• 4+ years of experience and proficiency in at least one programming language and framework (Python, Bash, Ruby on Rails, Elixir, or Java)
• Strong understanding of Threat Modeling principles
• Experience with Security Incident Response & Risk Management
• High appetite for challenging problems with a high degree of ownership

Desirable

• PagerDuty is seeking a Senior Security Engineer (Infrastructure & Automation) to join our diverse, customer-focused team! As a Senior Security Engineer, you will be a key contributor leading security initiatives around foundational infrastructure supporting PagerDuty's SaaS offerings.
• Your primary focus will be on infrastructure security through architecture reviews, threat modeling, and security tool implementations, while leveraging automation to scale security solutions.
• Since we own and operate what we build, you'll collaborate closely with engineers across many teams to ensure we deliver secure, highly reliable, and scalable solutions to our customers
• This is an exciting opportunity to build lovable security solutions that make developers and customers happy. The ideal candidate believes in securing infrastructure at scale and creating automated solutions that make security the easiest choice
• Lead technical security initiatives by conducting architecture reviews and threat modeling sessions for new and existing services
• Design and implement security controls for cloud infrastructure and containerized environments
• Work closely with Product Engineering teams to review service designs (full stack) and provide security-focused recommendations
• Resolve technical ambiguity in system designs, collaborating with engineering management and staff engineers
• Monitor and maintain security tooling supporting infrastructure security controls
• Design and implement security automations and tool integrations to scale security operations
• Build and maintain security guardrails and automated compliance controls
• Develop automated vulnerability management workflows to drive timely remediation
• Create security relevant alerting and metrics for visibility and reporting
• Implement automated incident response playbooks
• Mentor and guide team members on security best practices and implementation approaches
• Participate in our team's on-call rotation, triaging and addressing security issues as they arise
• Contribute to roadmap and annual planning discussions